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[1**91] T-^SrffiffltT. m%{B%i>^5t 
icfcofflrWSav mifEiS 2 ©il^fS 2 ©©&»/ 

gg^W^ISSlTfc <9 . mJfEfS 2 W^H/^Mi*^ 
fife § WSif #!c J; o -CFJf * $ it 5 1 © X-fc 

<Q , ffiffi^l©»S.t> ? ^2©»?r{ifflLTMffiT : -^4: 10 
ftulH 2 mic^fc <9 fl£-*Ht; $ ftfcBf-^tr - * £ mifE g ft 

» 2 <dsi^ i <n%mm/'jmmft<»<kffi&-?fo *) , m 20 

!E!S 1 ©ii}?g»/^M»*f©|i}«Btt^Bt[fES WHiftta^ 
*fr©& AWT?*) 9 . mlfSaS 2 ©©&§t/^Mgixt©$ 
» 2 ©ift&O^ 3 rotiSrffiJl LTmifES! 1 ©H£ 2 [aH- 

milEIS l ©Bt^t:xST?Bf^$ixfcB§^t:7 : --^&t>' 

mi!E 2 ISIMfrfc <9 Bf^b $ ft/c!S 1 ©it£ mi IE I ft Mil 
•f-S^-feo 30 

[§**94] % i ©Rt^bistt, ^nff-^kr/v^ 

& 

[1**9 5] ffifSfS 2 ©HHHbigW:, ^^nt-^ft 
T/w=f y XASrfiJffl-rs^ fc ^mWh-f 51**92 icffi 

[1**96] S5IBIB 2 ©fff^blSTi±, MBIS2© 
»SrffifflLTKIEIRlo*Srit^t:L-C^t)milE^3© 40 

LTmifEfS 1 ©tt£Bf-^t:1-5 z. t *«r» t i" 
51**9 2!;: IE*© ;m 

[11*97] S5IE^ 2 ©te-JHkxg-m, mifE!S3© 
LTmJfEfS 1 ©§t£Bf -^bLT^ib mifEfg 2 © 

asrffiffl Lxmmm 1 ©stsrst-^b-r 5 c t t-r 

5!#*Jl2lifE*©y7?£o 

[1**98] mlfE^fXgizfcVM:, HUIE2[HIC^fc 

0 Bf^Hb LfcfS 1 ©«^-. y ¥\z$ikfa, Stt^y ^ 

1 tc mrfEiiff £ M#r L It Mff. L fcfifS 
ifCt4r#®t-f-5ft*92lcE^©*'fe 0 50 



[§**99] milE^ffXS-Cii;, m^tHlcfrfcOif 

mifEiiff £ M L fc A *©HSU tcH# t fclf **-£tr C 
t £#^1" 5 1**9 2 i;fE«©77fe 
[1**9 1 0] /Nj/^V^T/V^y XA£ffl^T#i!E 
^ y ^St/mlfEBt^br - ^«IL, ^ -7 y •> ^ 
RUt- 9 y =. £#5 ^ y 'y>y"LUt, 
ItilEfS 3 ©$}®H/-&M»>tf©$&&H&ffl^Tmi!E^ y 

mllE^ 3 ©S5^H/^MSi*t©®ffi^/i 5 mIIESff 
LfcA^^itlcio-Cfjf^^H, mlfEjlffXSlcfev^ 

3. ^r^ffi i"5 r. t 1-5tt*9 9 ^IE«©*fe 

[ff*9ll] fflffiBWB«ffla«8;6 s 7 p y 

5rt *9 2 ic|Eit©;f fee 

[fi*9l2] H5IBBWiS«ffl*«l»i s 7r^v'5 y 

m%sX'hZ Z. t *#mi: + 5«*92 iCfEfc©*fto 
[W*913] 7 f -*«:ffifflL.-C < B»$fS#a J v>5 

® 1 ©l££ttffl L-CB(IEt-^*BS#^1-5^ 1 ©Bf^- 
ftXgt, 

is 2 ©n^» 1 <dw&&/ &ffim$<r><mmx*b *> , ^ 
ic .toTBT*^^ ^ 3 <om&$a 2 ©iK?g»/^«*i- 

fESWSif^i-ioTSr^rStfCfcO, m!fe»2©liS: 
t>'^ 3 ©gl^ffiffl LXmlfE^ 1 ©US: 2 [UlC^fc 19 Bf# 
jH1-5lS2©Bt^-ftlSi:, 

mlfE 2 [HllnfcfcSiif-JHkt- «t "9 Bf-f-ft 1 ©H4r 

mm^yyzmmsftm&Mfimmzmmi-zf&inm 

ftxst, 

mUEBt^kr-^ ©S** mifE g WiB«m^«ISSi»?j S 

2©SffXgi, SrW1-5r t*Wat1-5*ffio 
[f#*9l4] ^ 1 ©i^ff XST-d, MIE^-y^Sr« 

i: 1-51**91 3lcfEgc©*?io 
[1**915] frffi^fifcia-e^SitSWE^y^ 

^Sl'SfiiEBt^ftT-^©fE'li^F9f-©#»Sr-a^^ ml 
iEBt^kr-^©S*lc i <o mllEBt^ftx-^wtEtta 

Bff^^i-y-tvsct^itat-r •51**91 3ictEic©* 

ft, 

[1**916] 2lHllC^/ci9Bf^bL/cB^^ftT : -^ 
MLt, g«)Sff#^V^t#lCg«lB^til^«^ 

mitEBt^bx ^ SrSff -T 5 Sft Xg t , 



(3) 



mm i (Dm^m/^mmM^m^mammn wsfi#ic 

1 ©H&tfH 2 ©ilSrftffl LTffjEBf ^-ft:?-^ £ 2 @ 
[§f*Jfl7] x-^SrffifflUT, HWSflr#!^V^ 10 
Bt^-fk$ixfc7 f -^Xt^2lHllc^fc9»t#fk^ivfcBl 

©«&g{t-f-53ftxg£, 

is* i <nm%m/&mmft<D®%Mf>mm8 

itifsawsi^tH^^/cfticioTfM^tiT^^, m 20 

EffS 2 ©&RU^ 3 ©8!£{£ffl UTWE2[H]['^/ci9Bt 

^-ft^nfc^ i ©»& 2 @i;iotf^t5^ i ©m^- 

flEIS 1 om%TM-?'l§.W&*ltzm 1 ©»£M£ffl LTffi 

StjfEfS 2 ©a^IgtSt $ tifcx - * Bi!£r£/& 

[»*9 18] fg l rottfigis, #*fffc£^7/W 
y XAS:?iJffli-5C t*W»ti-5»*«l 7(cEft© 

urn. 30 

[8**919] S2©IWi»I^7/^yX 
AS:?iJffl-f5CtSr*!r1»i:i-58**:5l 7 icE-ft©* 



[ft*gi 20] » l frEfg 2 ©H£ffi 

ffl LT ffjfE 2 IhIIc frfc D l&tyt £ ftfcfg 1 ©»£«-§• L 
B5[E^3<OSiSrttfflUTHUlE2lillC^fci9Bt^ 

7 t^Efc©*?*, 

[1**9 2 1] IS 1 mJEH 3 ©SSSrffi 

fflUTm(IE2|H|{c}Dfc9Pt^-(t;$nfc^iro»Sr ; g^-L 40 
X^P), ]WE&2©&£ffifflLTl!tlE2@{;:fc>fct>lS-if- 

ft $ n/tn i r t t-fzimm 1 

7 (cE*©^fe, 

[«*9 2 2 ] ffiEi? 3 ©«^HUE S WBffeffl^mi 

[fif*gi2 3] iifaSB2ro«^EaWS(t#^3f* 
h#- FI-"a*H> £ft(;J:oTffjESl2© 



<$ffl 2 0 0 1 - 1 8 6 3 5 8 
4 

mt-tmxmi 7 i'E«©*tfeo 

[»#«2 4] fiufSSffXS^Slc, m&tt^^y? 
/> y -> a. S r- * ^ y Srgff L , iiE* 
Si-ftlEl£##~- v y v-^&tMfiEf-^tt^ 

Z^ttZkZ¥fWtb1r5 !**Jf 1 7 icEicW^fe, 

[8**92 5] Wffi^ftf-S/^S'v'^XttMIE 

1" 5 ' t ft < ituE^^-ftr 1 -^ 
tfC t 4rtlr» b-f&imm 2 4 tcE«©**o 
[M*if 2 6] mJE?£tt#^y^y->^XI4flE 

foLlt^&iz, iWE^y^©sllf#l-il$»&iI ; 5XS£ 

[!t*92 7] ltrEH»B«WA1l»* s ^y 

[1**92 8] f[SaB«Si{feta*««^7r^'>$ y 
^T-fo5r.i£#m^T5!#*9l 7 IcEic©^ 

[!t*92 9] f-*$r«fliUC, IWSft#!iH^5 
t#|wBWB«ffl**!IBt?MiEHftl*4^1-5, mlE@ 

2 0(1^^ 9 Bf -^ft ZtitcW, 1 ©H5r-a tf-^y ^SrSIf 
i-2>g{fX@i: > 

ffXSi, 



'/A 



EI l ra« 

U&m-?h <9 s WE^ 2 ©fKffijB/&M**J"©fMB*;6 s 
% 1 2 ®\cK^Xfe%-tZ>B 1 O'&^rXUt. 

[fl*3S3 0] miES{fXS-C^{f $^6fjE-y^ 
lcE«c«*-feo 

[»*S3i] Wia^y^Kfc. uew^flsx-^ 

SflE^*^ttlE^ftx- ^ ©E'B#FJf 4r-a tf 

[1**53 2] r-^SrftfflLT, @WSff#/4 5 ^5 
t^[cBWB^tii*«^X*Bft^±^T2., iflEa^B 



(4) 



5ffl«5r-at?^^y b, 

(a) f 1 ©»tf^ l ©$^»/£P#i»©<&MgiT*fc 

/^mmno^tmxh r> . hkiess 2 ©shb«/&m« 

3*©S5ffi«idSfifEBWSffi#l=J:o-CBfWS^ MESS 10 

1 <Dm%.Xtm 2 ©«£ttffl LTStFtaT-^ * 2 01- ^fc 

(b) ffj|2 2[HllCfrfct) &%\Vt-9 ^SWB^ffi 
SICCUS 1-5 8ft IS fc Sr-^tf C t "f 5igS 0 

iSi::BftB«ffl*««^B«*±J5!t1-5, ftifEBWB 
fcffl*«»^©7*- ? ©Sc^iS{9«Bt?*>o X. 

(a) fgl©jiS:ffifflL-CH&!ET-^*liif*ft1-5*l 
©Bf^fclfSi, 

( b ) m 2 ©ii^ts 1 (o$mm <D<&mmx°h 

<9 . mJtefS 1 ©»««/^Bi«^©«««i s SftSB B WB 
MAISiaotft^, # 3 ©«#» 2 ©8MB« 
/^M«*f©^BB«-C*> t> , Wtem 2 ©gH&«/4iM* 
#©$&it;5S milE B WSffl #(- i o TBfW $ ii. fjfEJg 

2 ©«&tfB 3 ©«SHgffl LTitulESS 1 ©it£2[snc;b 30 

(c) ffIfEBt^ftr-^S:t>*mlE2lilt'^/c'9Bt^ft§ 

^i*«p«ti-5»*«3 3[cffiic©^tt 0 
IS*** 3 5 ] miteiS l ©n£-§-ftX@fi, *ti»§^k 

T/v=fy X'A^flJffli-5Ci:*Wmir-t-2)tt*93 3 C 

f2*©gg„ 

[M*9 3 7 ] (fulfil? 2 ©KF^flSICg;}*, fjf2i? 2 © 
SI£{*fflLTi!ti!Efg 1 om^m^itLX^b, mi!E»3 
©HSrttffl LTffiiEiS 1 nmZVftWit-f 5 £ t 
1-51**93 3iCfH«©Stt 0 

[ft*9 3 8 ] fjfeU 2 ©Bf^-ftlSfi, fjfBi? 3 © 
«£{£ffl LTffJfE^ 1 ©«&«£#fk LXfrbMtZB 2 © 

LTmrfEU i ©»£nt ^k-f 5 r i £#lSi-f 

5ft*93 3lCfa*©g*„ 50 
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3 9 ] saiEj^ff 18-Cli, mi IE 2|sHcfrfc 9 

Bt^t; $ ixfcss i ©n^tfife- y yic-^stv, v 

SiJ^M«L/c*$8^^ti>^i:^#mt-r5f** I l3 3 ic 
IS«©SSo 

[It*3l4 0] ItliE^flSTii, iflB2|HltC^fct3 
Rf-§-ft$ttfcBl©»^H5IE^?'ytC^4H, HS&^y 

€r^tfCt5r!|tj!St-t-'5«*«3 3lcEic©SBo 

umm4i] tfiiE^tf^tg^Bir^isiiiic^ 

(d) Ay-/y^7;v^!) Xi*£^TMffi-^-.y ^Stf 

(e) ^3©S5^«/^M^©S5^«S:ffl^TME^ 

•t-5?^xeSr^, 

3 ©i5ffill/^lli«^©i5^li^ 5 flf28{f Zfflltii 

■> a 5r Jiff I" 5 t S: #® t ir 6 !**« 4 0 (cffi*© S 
[8*#JI4 4] BUffi£££{fig»£ s lgl©7 7'^->5 

y^-efc^, #jiEB^nii^tB^#g§^^2©77^-> 

b%\zsmmmiiitim&xm&z£.}8.i-z>< wibbwb 
ta © r - ^ © %£.mii mm x h o x , 

5^^-atp^^y 

XL, 

Sfl f2Hff ^Ilg 7" b -fe ^ XS « , 

©BlHHkXgi, 

(b) SB2©*iS»l©85ffi«/^H«*f©^BS«-C*> 
5 , mlfE^ 1 ©®{ig«/^§l«*i-©S^a^HuE B 

§lc±oXfjf*^ix, ^3©«^2©85^ 
!*f©^B8HXfc !9 , ftifEfl 2 ©^»/^PSI 
M©S}«JS«ii*>flt[fa B WSfS#l= «t o T0fW S tt, fJISIB 
2 ©SiSr/H 3 ©il£:fiffl LTbijIE^ 1 ©«Sr 2 

fc u Bt-^-ft-r 5H 2 ©pf #^kxs t . 

(c) t5fB2lfiUi^fcl9llt^k;SnfclBl©«S:-&tf^ 



(5) 



a^sft-rsgftxai, 

-/w-ClffiiS g WiBfittH;/j*S£aifi i-5 n i 



/^•y i, 

( a ) 35 1 om&% 1 «®^§i/£lflf^«i^SiT*fc 

mtt<r>m$5mvh *> . Mien 2 

1 <DmRtt%i2<Dm&tizf8 Lxm^m^tz^o^it 30 

(b) t*»S;fcfc^-*!^&miA^+4«fc£J&I 
[1***4 9] f-^^ffltT, SWSft#d5V^ 

$n/cr-^St/ 2 Etc frfc "9 ZtitzW, 1 
W«£§{f-f 5gff^i> 

y^y i, 

( a ) 35 2 ©St/JSfg 1 ©fiS^tt/^P^ii*tCi©^T*fo 
5 « mif2f5 1 ©85««/4il8»*fro©ffi*astaiS S ftS 

ft#fc ioT0?w$n, 35 3 <Dm*m 2 ©ffiastt/^H 

««isSiJfEBWiiIttttl*«IS{c«toT:@f*$ix, fJ!B35 

2 (7)HS.t>*35 3 <£>«£ffiffl tHliCt5/c <5 Bf^-ft 50 



2 0 0 1 - 1 8 6 3 5 8 
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£*vfcf5 1 2 Hfcfrfc 5 1 
i, 

(b) £^£ftfc35iroi^tefflLTflffil*^teT-y- 
W§-fS35 2<D«#Xgi < 

(c) H^-Siifc^-^i^ffillBBft^riaBSrttfflU-C 
Bit £ 5 Bit * ^tf C i * i I" 5 B 

[8***5 o ] ttimm i ©a^-isii> #*f«W7 

zv =f y r i £#l§5r i •* 5 «*f 4 9 fcS 

«c©B^tii^^*o 
[fit** 5 1 ] fjf235 2 K»a#XS»±» *f»tt^-T/v 
^y ~ ££#mi-f -5M**4 9 {CIS 

©B^ttiyjgft, 

[It** 5 2] HUIE351 ©m-Ss-XSli, SfjlE35 2 0 

LTmifB35 1 ©**«#UT^P)HulS35 3 oH£ 
ttffi LTff|fE35 1 omzm^i-Z Z t Sr«M»i-f-5»* 
*4 9 KIE«©Kfcffl*8ft, 

[11*55 3] WIB351 mifa35 3coSi 

SrftfflLTH5IEf51©»Sr^tT!i^, ff|fB35 2 ©1 
^ffiffl UTmite35 1 C i £#mi1-5tt 

M4 9 irfEicOB^tti^SSo 

[1***54] sfifE35 3»«i^tfrfaB^t±iy:Ka®rt 

*4 9 dtEHftcDBflitii^tt, 

[«** 5 5 ] ffj!E35 2 ©»f±, WIE a WSff 
Girt*-?— h*— Krotf>|c^4ir, ffj!E35 2 ©H^il 
IB S WSff #£A^©Sf9 ■ 3 ft 3 w i i -f 
5W*«4 9 icfE«WB^ffly3S*o 

[11*95 6] mB^itmt, H\C%%tt%^-y?^ 
y V 3. R3m%> x - * ^ y £gff L , mllEIItT 

^iiEl-2>^iiEXS4:^tfCilrit#tSi-t5tt*«4 9 [c 
E«©Bftffl*^»o 

[tf*95 7] mlEII : ff"sifg7 B Diry!,xm(i5(*, W 

y "> a- XlimlfSS^ f+ # r - 

ta^-r § c i * < nasi* #f kf- ^ * fs*+ a is * 

£tf£ i*#ISi-f-5tt*95 6 tcf2«©B»tiJ*g 



[ 5 8 ] mmmn^my n -tr * xg loiase 

^ y y •> ^ Xfittlfal-* f=t # r— ^ ^ y -> 

y^w^ff#tcfflfe^^5Xg^^tfCi^#mi-t-6 
tt*JS 5 7 l^!E«©Bfttti7J^fio 
[It**5 9] IfjfEB^tB^gfiii^y 
i^#mi-f5»* J S4 9 lcE«©B^tti^gfl„ 



(6) 



[§**96 1] r-^SrttfflLT, BWSft#^v^5 

2 [Hit' J^fc 19 Bf-SHfc Sftfcil 1 ©gISra tf- ?*£gff 
* fl »e> lift; £ feJW" 3 t , 

(c) !B2©«i4s*iro|K«*/4iHli*fro85«5»-c*> 

►) > HUlE* 1 ©$g&»/&M«#©8He«;S s iiii!E S 
(I#lcj;oTBfW$^ IS 3 ©«is* 2 ©fi}««/^M 

»*t©f&®«-e;fc ►) , m^gs 2 ©$&&/&$&#©$ 20 

2 ©»Xl>*ig 3 ©fc&ttffl LTfflfa 2@i:fcfc D Bf 
£tl/cfg 1 ©#t£ 2 mict?fc 13 '&%rirZ>m 1 ©tt^-Xg 

MZLmSfH 2 ©ffi^-Xg t , 

(e) «*s^^-^«»e>pi«S:^j*-f-sii«4fiai 

[!**96 3] Sfde^y^«35t-l5IEBt^bx-^W 

1-61**96 1 [cEic^H^ffi^gfio 
[f#*96 4] f-^*SiLt, |«Sft#^V^5 

Itffl ©f - ? ^ 4 i 1 5 f - ? i , 

fg 1 ©H^tg 1 <DW&m/ / £$l&M<D4ifflmX°h <9 s Wl 

^*iSf5fBBWSf9#t-J:o-C9f%$n. fr!2f! 1 ©« 
StFH 2 ©glSrlSffl LTlffllEx-* £ 2 [UiC^fc <9 B# 

flS-rSUHHblSi:, 

ffjfE 2 HlCfrfc "9 St^-ft $ titer-? £Wffi @ WStffetii 
^ttlSlCafeft-f-SSfiXSt. £^H-3Ci£Wti:-f 50 
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13**56 5] f-^MLt, Bff)g{f#;5^3 
ot, 

itifs 3 y tr a. - * mn^ffey & * * xs»i, 

? ££$-f5fg 1 ©Bt^ftXgi , 

Iff 2 ©HtfSfs 1 ©S^#l/<kll?#l#©<£M§lT'fo <9 , m 

«^scj;o-cfjT^r$^« m z <n&&m 2 nmmm/ tern 

St>*^ 3 ©I45rftffl LTffJtB^ 1 ©»$r 2 Hicfrfc >9 Bf 
^it-fZm 2 ©Bt^-ftXS t « 

i nm^m^ffjmmmtimmcmsi-^miixmt , 

SrW-f5^i:5r#mt-r5 3yf 3 .-^-5l^«: 0 
[11*96 6] ffifEiSl ©Si^^V^AI-^S^S 
C t5r#1tt1-5If*96 5lCfB«©3yt°3.-^«JgE 

[«*JI6 7 ] miffl^ l ©Pf ^#Bf »ft 

7-/w=f y Srftjffl-f S r t t -f 5 ft *9 6 5 lc 
fEic© 3 y t° ^ - ^ "siSt^ffo 

[!t*96 8] SflfE^ 2 ©Bf^klSli, ^*l»Bt-^ 

(r fE*© 3 y bTa-^ ^r^^o 

[ft*9 6 9 ] huIE^ 2 ©Bf -§-ftXgf±, fl?S^ 2 © 

mzt&M Lxmmm 1 ©a^nt^bLT^PjMia^ 3 © 

[1**970] mmm 2 (D^itumt, mmm 3 <d 
mag.® Lxmmm 1 ©n^Bt^t Lt^e>t«E^ 2 © 
n^rffiffl Lxmmm 1 nrnzmwik-fz, z t zmwit •+ 

5 !**9 6 5l:tat©3yt'a-?^I» 

[1**9 7 1 ] fJfESff XST\ HUIB 2 mtC^fc 19 Bt 
%-itZtitzm 1 ^y^3EI-, 

&\ 1**96 5lcfEit©3ytV-^'5JBEffift:o 
[1**97 2] MfE^ftxa-ed, mm2mct>tzi9 
t$%-ikZtitcmiv>m&^y?\z.$1zi%. m%~--y?fr 

ttZb%¥fWi.k "1-51**9 6 5lcfE«©3yf 3 .-^nl 
[f**97 3] fyf^ytV-^Hfi^ffc^p-fe^I 

y -> y ^ r ^ y x a 5- ffl v n x m m^ v t>*Su ie Bt 



(7) 



11 



y*. 4r#5^ y ~yy ?XM b , 

y i/ a S t/fjfEr '- * ^ ICt" v 5 * fr%%xlT 
£XgiSr^ 

U/iAfeicioTM^Six, milEilfflfi^HiCfififel- 
£ ## - y ^Vs vy -> lft!E¥£ ft * T - 9 v -y =■ 

zmt-?z>z.bttw®b-tz>m^7 2 tcteit© ^ y t° 

ltt*97 4] HuElWBifeffl^ttlStt^y y^t?& 10 

iw*ii 75] miE i tbm&mfim&ny r^->^ 

i£i-@W«f£ai*«^T«ft££$1-5, ftlfES 
bIH 7° p ir * IS £ mti U fc ^ t° a - * Bj»t jifrt? h 

ot, 20 

HI-«to-C3fW$n, ?B 3 ©«iSfB 2 ©85ft«/^BJ 

n^ittjiE g w§ff #1- J; o xBf* ^ ffifes?2©#i 

S.t>*^3©H5rffifflLTtfifE^lcoii^2ll]^^fci5Pt 30 

mm- v ?zmm g WB^ffl^fii^t'Sff 1 ©£ 

WfBut^bT-^ £ mie a ftHttm^ssi-itft-f s$ 
* 40 

[W*9 7 7 ] fjieig 1 ©iift igTii, fjie^ * ^ 

-/VT-WIE @ WiiJfttii^^lcjiff 1-5 ^ b Z 
#»2:1-5i&#l7 6(cE«©3yt°^-^ «J£f*» 

fBBf^-ffcr * ©g*^ffJf2B£-§-f b-r- 9 ©!EtS»0r~ 
© # 1 £ "a tf C i: £ MR 2: 1" 5 H *9 7 6 t z mm © = ^ 

[lt*97 9] 2@l£;bfc5llf-§-flST-*£f£fflL 

BWSft^v^fctl-Bttiiftllll^ttlS-CtSIEH 50 
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IzfrtzV^lkZtircr-Pfrbm&ZQil&lrZ^yV 
a. - mn^m-f c ir * Ig5:M L fc 3 y tT a - ? "I 

tuts a y t° a - ^ Jlff^Tffi y p ir * IS li . 

2 [Ulc^fc tj Hf^ft^tifclit^fbr-^SrSff i-^Sfl 

n 1 ©«^^ 1 ©85^si/^iBe*r©s}®iit?fc 9 . w 

SE^ 1 ©S5?g|i/^:^SI*l-©8}«Si^B5fEB^Sff#(- 
ioTFM^n^ ^2©^^^2©^«/^P»»© 

ffi^ii-cfe ►) > mmw 2 ©^^/^w^*t©^»^ 

B(HSIWP5ftiUiA«»tJ:oT0f*S*t, WfE»l©« 
St>*^ 2 ©tt^rfiffl UTtfrfEBt-8-ftr-^ £ 2 tUtcfrfc 

$ ftfcT* ^ Pitt Z%L$.irZ> Wlfe^xs t , 

[M*«8 0] r-^5rffifflLT, aW§ff#^^-5 

w Btt w icitfi $ ti fc t - ^ /j »e> aft ^ s 

3 1° ^ - ^ HffWlg y o ir ^ Ig £ L fc 3 V t° a 

mUS^ytV-^Uff^Itfe^Dir^iaii, 
^%-{t£tltc ; r-'?RXf2mztytc<oX1f§%rit£tlti% 

m 2 nm^m l ©fi5^»/^M»*|-©fi}?B»^& "9 , fill 



mm 1 ©8HB«/^BMi»©|K«iii5B5SBI KlSff#i- 
X oTFJf#£ tis SI 3 ©«asf8 2 roSHSf»/4iM«W© 

iK^ttT-fc ti , mmm 2 ©^^/^n^*t©^ii^ 

mif2@WiiIfttb^*lflcj;o-CFJf*^Hs ffJF2fg2©il 
SU?^ 3 ©«£ffiffl LThuIE 2 Hl'frfc <P Bt-g-fk^iifc 

^ 1 ©«£ 2 ®\zt>tc3X'&^-?z>%> 1 ©m-8-xst < 
•f5^2©a-§-iat, 

^ irfcx- ^ a >*b Pitt £4)5)c1-5 Hft^XS b , 

[11*98 1 ] mmm 1 ©m^-xsii, nmw^^r 

/V =f y X A - b *£W®. b -T 3 8 0 tc|B 
icd3yt°a-^^ScKf*o 

=f y XASrflJffl-rSC: t£1#iti:1-5!t*3l8 OldfE 
8 3 ] tdSBSB 1 ©m-^-lSii, StliEl? 2 © 

% Lxfrbmmm 3 ©n^^ffl Lxmm 2®\zt>tz n nt 

^-f k $ 1 ©a^ffl-S-1-5 CiSrftf 1 1-5 

[W*JI84] ifE^l ©tt^-XSli, mHEH3©ii 
^rffiffl UTWIS 2(Hlir^fc 5 HHWIsSftfcSB 1 ©ii^m 
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11**9 8 5 ] mmm 3 om&mm s mm^^m^ 

M9\-<D%W\c£&Ty-±xfrbW&£tiZ>^kZ¥f'®k 
■f 5 tt*9 8 0 tClBift© nytv-? -sj^ifro 
[ft*9 8 6 ] iftlKSs 2 (omtt, HUlE @ iftgff #ri s 0r 

WSff %vm<D%it £ ft5 C t «:*HKi +5!* 
*98 0tcE*©3yf 3 .-a'^ffift: o 

s^y-y^R Xf%% ft" # X - ^ -.7 •> a- £ gffi U til IE 

51**98 Ol'fB^Wayf a-^^ffifr, 
[f**9 8 8] iilB?ife#^^s'y^5/->^X(±milE 
^£ ft t r - * / •> y -> ^ fls IE 3 ttS tf^tt ©tfcSE 1 - * 

mm®-, 

[§**98 9] huIB^## — y^yv'aXfifiSB 

M 1 t£ Z t Z W® t "f 5 ft* 9 8 8 i £ mm <D => y fa 

5 c k *®'& 1 1-5 f#*9 8 o izmMw =» > tfa - * "I 

[i**99i] B5fEB«Sllfem*«l^«-7r^^5 'J 
«^T-fc 5 r k k -T 5 §#*9 8 o f cmmo => v f 



[1**99 2] r-?*ttfflLT, @WS:{f#^5 

WiB«tH*«l»t2lftSixfc7 f -*ii>e)iii«S:±fiKi-5 
3 y t° :* - ^ Hff sfl&f <a -fe ^ L fc ^ V fa 

2[eI^t)fcoTBt^$tifc^ 1 GftfrStr^y^&S 

{f-fsgftx&t, 

ffiXg t , 

SfJlE— y tn&ti&t 5 Bt^br - * SrSiff" 5 git X§ 
Btl!5@WP]^W*«Sffi'ioTFM$ix, fiU?23l2©§l 



10 
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% i 2 m'frtzoxmw-rzm i . 

m^-X5^2co^-§-Igi, 

^-r^^k^w^k-r^^y^'^-f^umt. 

[ft*99 3] H«iSS{fXS-C*tt, H«i2--y^ s tt J F- 
^-/VT'Sff $H5r tSr#mi-t-?)tt*3l9 2t^E* 

[ §#*II 9 4] fiftl^ y t-taiEllif ^f- 9 <D 

BtefykT-*<Dt&femffi^<D&M&$tsZ.k&i$Wt.k 

X, 



i roii^iB i 



ffl-fs^t^-Ft, srw-rsr ir^^mt-rs^y -y 

iticg^yy y^-c-ii^^^-ts, tfrieiWT'yy 

30 ^ir^-^Sr^tc^fi-syy K9-f^T?*>o 

^ 2 i ©S5?g«/^wsix*w^si-T?$> o > fi 

40 |!3©ii£i£fflLTMeiH««£2[H]i^/co-tllg-!5- 

l©»*ff|IEBW7 p yy^(c3|{fi-5aift3-Ki: < * 

[1**997] fiijEIRl©®^ yv^Aic^^tv 
5^ i?r#mi: 1-51**99 6 (CfSicWyy 

[i**99 8 ] wimm i wBt ^tmm^it 

7/v=ty XA*jpJffl-f5, f**99 eicEitWT'y 
50 K 9 



(9) 



15 



2 ©HSMiffl LTffJtEfg 1 ©it^Bt^LT^fuiBSf 

3 ©MSrffiffl LXwiBB 1 ©®^St#ft-f--5 C ir 

[M^ilioi] mfZB2<D9g J $ik=i- Fli, mfEfS 
3 ©HSMiffl LTMIEB 1 roiiSrBf ^LT^^mHEfj 
2CO«^ftfflLTtfllE^lOii^St^ft1-5r £&WS 10 

[»*Sl0 2l #J8B2leIiw*>fc ?> BiF^b^ix/tiB 1 
©Sides' ^l-"&;£ft, Ste^y^HlcWIEizlff*! 

L fc Km © SftjgiJ ! C M#- L fclf % * is tt Z b £ W®. t -r 
5W*59 eicE^©^ F5^„ 

[IIM10 3] MIENS' ^MK. mZHZ^yy 
Ay> aSt;i« x— * ^ £"a miiey y 

# # *r— 9 >^v*s =■ © jE S ttS t>'^'l± Sr tfe SEi" 
5$>ll3-F£^frCt£#t££t'5tt* I f 1 0 2 IcfE 20 

S£ ft § r '- * ^ '7 -> a co 5 *> © IE S ttS xf&£ 

3fc!ESc©:/y K7^^ 

T, 30 

*&£j*-f-5jBl©«fHHk=i- Ft, 

S5 2©i^fjU©$&i^^l§^©£M8lT*fo<9, m 

tc£oTFjr*£ft, 3 2 ©ffi«B«/^M«*t- 

©^P^HT'fc 5 , fllESI 2 ©S}«B«/4*M«*r©«HB« 
^EgWgft^i-ioTF/rW^ft, ittifefS 2 ©tt&tf 
S§ 3 ©H£{£ffl LT fflia* 1 ©£i£ 2 BKfrfco THM^ 
ft1-5^2©Sf^ = - Ft, 40 
tuta 2 miCibfc <9 Bt ^§-fk£ftfci!i}iE^ 1 (DM&tts^v 

nt\m^'yy%ifimtf)7y > 9 ta&flM- 53? 1 ©ait => 

-Fir, 

ttifEBt^x-^w^imifEswyy y^a»e>sffii- 

5^13- Ft, 

iiiffn-Ft, &G1rZZ.b$:¥fWLb1-Z7}) F5 
[»*S10 6] tfifE^l©Sff3-Ff±, WIE^y 50 
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yzn^t-^x-mftn ft-?)) >?\z.mit-fzzb&ft 
Wb-r&immi o 5icfa*©7°y K9>f/<. 

[It*Jll0 7] f9IE^3- F(ci 
|B^s/yi5}g(CH5fBlit^t;x-^©fEli^0f^©#fl8^ 

tS#BT~<o*flH&£if £ t *W»t -t-5»*9 1 0 5 ic 

ftfcHf^Hk $ tit: 1 ?-* i> C)Bife*4j*i- 5 a VtTa- 
3- Ft, 

H l <nm&% l ©gS^/^Hii*t©S^^T*fe , mi 
± o TfJf # ^ % 2 ©tt/55^ 2 ©s^«/^r^^© 

Xt>*^ 2 ©ilSrftffl LTSirf5Bt-8-fkr-^ * 2 H(i*>fc 

y t° 3. - f "imm#± t-mtt $ tut 3 y e> - f mn ^ 

Bt $ tvfcr- ^ SU 5 2 [H] iC t?fc o X ffi^-it § tlfc ^ 
1 ©Sl£g{f-f 2>Sff 3- Ft, 

^ 2 ©&#!& 1 ©S5^tt/^^^©ffi^HT*fc "P , m 

mm i ©®?{5«/45:H«*r©8}««as mites wsft #k 

iotfifW^ti, ^ 3 ©«d ! |f5 2 ©|K?g»/^MSI*t© 
^Si-efe 1 ?, iiuiEIS 2 ©S5«SI/^WSI*f©|K?g«*s 
mfESWH^fttti^aSgl-io-CBifW^H, mlSI?2©ii 
St>'M 3 ©H5rffiffl LT 2 [n]ic;b/c o TBt^-ft $ ft 

tc%i<Dmz2mz.t>tcixm%irz>mi<Dm%=i- f 

ir, 

tS#SftfcflfS* 1 ©H£ffiffl LTHaiHIit^br-^ * 
ffl*i-5SB2©«#3 - Ft. 

t, Sr*-f-5C b k + 9 &tf*lM7 

iio] Miafs i ©«-§-=>- fh, 
^•T/w^'y X2±%mm-tz>z.bzw&b-tz>m$Mi o 

1 1] f«JSEig2©tfi^3- F(i, 
7/V=*-y XA*ipJffl-t-5ii:S:1Witi:i"5l)l* 3 Sl 0 9 
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[«*«112] BWBlBlO!l*3"-Ktt, H&SB&2 
(7)Si£1£ffl LThuIE 2 mzfrlt <9 Bt^kSHfcfR 1 £>g| 

So 

[!*** ii3] iftlESS l 0>£-£a- Kl±, HiiE^ 3 

(Dm%\m Lxmm 2mzt>fc 9 i»*fk;sttfc* 1 

S:«#LT*»e>, mjf2^2^tt$rftfflLTmjfS2[Hlic^ 10 
fc5llt^kS*tfc*l©||fttt^5C 5 

So 

[1*** 114] ffilE^ 3 coUffitijfE 1 6^H^aH^« 

[§»** lis] mmm 2 ^a(t mis g »sflr#* s 

So 

y y'/s j/ •/aS^tttT-^^ y ftSff U 
HulE^ytv-^H^tgyp-fe^lSdSic, fulfil- 
£#£-^y ^/n y i/ ^-St/Hii IE l-^##r : — ^ y *>a 

^t^Cir/jKirtlfil^^-^ft^Jg^^- KftJE 

[SMfSll8] irtfES^ttt^y^y^aXlimJ 

*BScbfc#^-lc, miffi^y^ii{f#lcilftftil?>3>- 
KfcJEfc£t?£fcfc1«r*fc1"5i»#1li 1 7icfeit(D3 40 
V f a - * "JIB 7 s p 1? * IS. 

?l£fr "T^p-fe^lS. 

[It*9i20] tti!El«®fctti;*j«£#7 7*v'5 

y $^-cfe 5 ctft^miri- 0 9fcie*©=» 

y tr » - * Hff "srtB f p -fe * IS. 
[W*9i2i] f-^^fflLt, BftSfll#i«v^ 
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yfa-? Tsj»j£ft± t^«M S ftfc 3 v tr 3. - * mn~*i 
tgypir^is-efcoT, 

2@l£i:oTI*-)Hk;£ftfcjBl ©«ft-&tf~y^ft£fl 
•fSSft =>- Kir, 

J: o Tgff fi" £ ft, ® 3 2 co85ffiSi/^MSI>!tcD 

iiaiBB«ie&tti;ft$miJ:oT0r#£ft, 1512182 coil 
RUW. 3 ©itftftffl fCmi!fi 2 m\ct>tz <9 Ift-fHbSftfc 
IR 1 ©Sift 2 |HHctjfco-C**i-SIB 1 K 
t, 

ftfcmiiEgS 1 co«ftffiffl LXmB^itf -^ ft 

i:, ^Wi-SCirSr^ir-rs^yt^-^HfT^T' 
pir^IS. 

[fi*Jf 1 2 2] suffix y^S^- A- "CS:<f Sft 
Hff^^p-fe^lS. 

[§f*9 12 3] ftjffi— y ^IlKi-ffilEBf #ftf - * 

ii-5tf*9l 2 ltcfEftOayt'a-^UffoItgyp 
-t^ISo 

[000 1] 

^EPJBlJ (secure printing) ^Htf-fSiii^m^^'ife, 

■e#4v^SiJ9*-^oflf*{t;l-B8-*-5. 
[0002] 

I±, ^y h!7-^rt©lo«*0f(Cfe5pyt°a-^^ 

5= * l fc wj V s a y *: , gu co *fjf (c h 6 m& m & 

ftftttdtes *M^^y • ^ 

if © ^ y h 7 - ? ± ©SB J: o T WJ s> 3 ^ $ 
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[0003] kic. %im£ti±mt)fr%i¥f-*]x*m%&ti 
•s^iat^D^o z^wmzfttcxmiz, aft§it#a> 
xm%%iifc%tM'm&itit)%m'$mirz.m^. fc 

4 fc* * ©ifi < Icgfc A* e> it -c t a 5 c t & -es 5. 

[0004] [si«©raHft7r^^5ysHs^*)je-t> 

#*. aSflli*»S*H*^rt6ttA J *)!). BftSff 
#J;"J fc$tefca&flMfc7r*S'5 y$tc£j*LfcAft?>!i 

[0 0 0 5] 
[0 0 0 6] 

S tcfctt g fiiililWi: i oT«tu1-5 c t tfs-e£ 
5 J: 5 4*ife-Ci©*ttWi«r*-^ki-5 c b lc X ot, 

^Hk (i-*fe*>^HI/8H8«») T/^yXAiciot 

[0 0 o 7] *#©H(fc*4jiM-5fc»t-f±, BftB<£ 
l±J^«§|w^iti: Bftgfi#©|B?g«©B;fr£l£ffl L 
T £ © 2 HII' frfc 0 Bf $ *tfc##«Srfl[-»i- 5„ ff 
iKli, ift£fi#©«WMM*Btt£f5#lcj:o-aB 30 
Aft lci«& £ ftft It ftlift 6> 4 v \ ftfomzm^r L fc 

U ^©ffi^£ftfcWJx-?tcK^TBIt!£BftB 
[0008] ±3E©«j£©ilg*» Btt3ft#©fMB*£ 

tturaH-scias-ctftvN, got, c;fxf>©$&§i 
a*, twii a ft£« b WH«m/j«**rJt ± 

Wr fc it b ft Bfiffi a**-e l a «-f s c t a> x s * 40 

fc*. fWr-*©iIj&l4, BftS{f#A 5 v^i:#i'fc 

it b ft b&s mt>m%s x t * »wmi- 5 c t a* t # v \ 

[0 0 0 9] fto-c#389]©-ffi«fi, 7"y>^, 7r 

y^Sft^WgftB^tii^^©^-^©^ 

5 # icfclt B WHfcffl;fc«S-eiiift c b a* 

T\ £-ffS2©«, ft^TlS3©gl£M£fflLTSSl©li 
£2BfcfrfcoTflHHk1-5o IS 2 ©gill, Hl©$® 50 
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a/^M»»©^PB»-e*> 0 . SB 1 ©8H&«/2tM«» 
© fMBtttt, * © B ft Htt ffl T'FJt W $ fo Z> . 

If 3 ©giftIS 2 ©ff5ffi«/^M«*f©^H«T?*> 9 > * 
2 ©$8®H/&Mft#©lflffi8fi#*, -?:© B ftgff # 
fcit-C0fW§ti-5o #^t\ i*JHfc:x-*,fttf2[Bifcfc> 
fc ►) Pf *{k£ttfcJ8 l ©«©3Sd?£ BftB^tb^^i- 

[ooio] c©!Sl©Sltt, 7>^-Mc£j&£;h,3c: 
bfrft$.Li>\ MIC, Ml ©SiSrfflv^fc^-^wnt^k 

it, ttw$%ikTfr=nj xAz&mLxmnzft&^k 

c.taw£Lv\, 

[0 0 1 1 ] MIC, ^2St>*|g3©ii$r<*fflLfclRl © 

it©i^{k©Jii#£$ic-f scta^-So fd^if, 16 

■Srftffl Lfcff? 1 ©^©li 2 ©Bt^-fkSrmfe-f-S r t tfX 
sKv^l, SS3©H£MifflLTSgl©g££liif-§-{fcL 
Ta^. |g2©HSrffifflLfc|gl©li©IS2©B|f^k^ 

[0 0 12] 2B{C*pfct)Bt-§-{t;$tlfclBl©»»i» ii 

^StfSflMfwWJtBBfllUfc^offioflHSi: i tic 

T*l±, C©77?ia5glc, Bf^s/v/V^T/W^y XASr 
Jgffl-f 5 c b ic «t o v fBCMWtfr - 9 

Tff& 4 <Dm&RI^X~- v v •y^.RXff-^^ y i/ =■ 
{z^ji/f/vrnZx-thTM^tio |g4©^li, IS 3© 

m%m/'&fflm*i<nM&mx%> t» , is 3 ©ss&n/^ 

«»OfiM6«tt**, x-^jUftSrMife LfcA^fc'ltlc 

S t>*l-^ 7 - 5r»t ^k^- ^ , S t>* 2 (si 
ic^fc "9 ^-(k^^fclS 1 ©8i-#tlCaftrt5 C t as 

[0 0 13] Ji|E©t»^lcJ;o-C, B^^±fiic-r5fc* 
©7 f -*£iBttHMJg*lc2!ff U C*Mc i otl ©B 
BftSff#a5^5t^|cfclt, BftB^tti^«^ 
tc i o T WJ-t 5 C b a* T' 1 5, 

[0014] m<Dmmx*&. **wf±, ^y^^, ^ r 
^ -> 5 y «* if© a ftB^ m *«*fca&fir $ nfcr- ? 

Xli-Wi^ftSSgfrlcF^-fSo 

c ©7*-^ lt, a ftSffl #a^v n ant icfcit a ft 

tlfcx-^Rt>*2[H]lC^fcoTBt^k$tlfclS 1 ©«Sr 

BWB«ffl*«S* s S^«. » 2 ©US t>*IS 3 ©ii5r 
ftfflLTBf-§-'(klSl©«*2lEllC^fcot: : g*-t-5o IS 

2 ©«I±SS 1 ©S?B*/^HII»©89SS*t?*) 9 , % 1 
©fK!g«/^HI**t©«!6*tt**. B ftSff #fc*ltT? 
FJf*"$^-5o IS 3 ©HI4. »2©fMS«/4iB!«B*<o8 
^Xh <9 , IS 2 ©$&«/£M#l*f©$5e»l4**> 
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ftffl L THHHtT*- * L . $ hit? '- 9 frb 
[0 0 15] »2fttf*3 0*fcttJaLfctSl <Dm<D& 

[0016] SH WSiWBt-§-'fb©]fiff f-fC? C> |2»i 10 

[0017] uv^Hlfero^ffi-cfi, %2<Dm&\ B 

o-CT^ir^^Ifg-efc-So ^tC s ^3CD#li4 s BWB 

[0 0 18] B»B«iW*«»*S5!^ v i£fS#Xtf£fll 
# K iC , ^ y y^ 5/ v- a £l>'g£ ft # r - * 

y faftt^&tt* 7—9>^ y y^n^M^c^mth 

fcH^Ktt, ^\Vt-* tcmmrth c t t)W$. U\, 

fc^yyWBt^ftx-y-fCjfffl-fSc. ttCioT, 5 
£tt# ^ y ^ y a-Stf^fc tt# r— y" ' N y -> ^ »TG 

- * Srggjf -f 5 c t & ft * t v \, 
[0 0 19] JiiHcofflf^lcioT. Bffem^gl-Sff 40 

[0020] **Wwflb©««ittt, BK«{ftW;frttS3~ 

g WSflMf #v*.6 £ * l-fc'it g ftBfttti^^T'Bft!*- 

1 ©fc&tfSS 2 ©HSrftffl LTr-y"£ 2 m'k>tc-oX 
tiWk-t*. jR 1 ©Stlif! 1 0&ffift/&Mtt#0)&M 
HT&9, 8 1 ©fB£tt/&W!*^©fBffi«te##, g 50 
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«H«ffl^«gfc*tt-e3f^r * 2 ©gtfifg 2 ©SHB 

m/Afflmft^fflmxh 9 . ts 2 ©fK«*/&iiii**] 

©SHBfcH:**. B#© g «SfS#yS»tt?9f^5*t5. 
ftv^-c. 2lalBt^t;7 :; -?5rgWB^tii*«^(ciiff-f 

[0021] iSoirittioT, Bft*4*i-5fcft 
©r-y-SrB&tti^mMf U miaotcwl 

[0022] tecoffi«i?(4, BtfjBftttti^li 

»^ftfflLT, C«2[H](C^fc'9Bt^t:$ixfcBt^t:7 : ' 
-^?r2[H]|c^fcoT^^1-5o * 1 ©«I4IB 1 V>%® 

B^© g WSffi #fc(tl' «t o TPif# £ 

[0023] hmommcx-ox, mum^mm\cmit 

$ ii fc r '- ^ * 5 <D B^ ffl ^3 & * I £ (6) ( t fc t » t? h *) , 

#^■1-189 » CWx-^^ffifflLTB^^ft^^tvSo 
[00 24] *^BJ©fdiroSi«-C(i, B WB«m^/«^ 

i±, «io«*ttfflfC7*-^tit^k;i-5JISi©iff^ 

ftie. * f) tfi:! 2 ©istfi 3 ©ft^tffl iti i 

tf o - - T?JB 2 c^llS 1 ©S51!B«/4illB«*r©4iW» 
T»*>9. KS l BW 

»*f©fi}^«»±**. Bfl^w B WSff #fc*(t t ± o "CBff 
W$^5o ^^T^Xgi^ 2@l«^k:IRl©»S:^ 
tf^y^ifiKt. UlcSfSXS'efl^y^^BWB 

[0 0 2 5] _hfH»«^lCj;oT. fPM^a^O^y/ 
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[0 0 2 6] @WH«tii^« 

Sr2 0tbfco-C«#-i-**loa-9-xa*^tf« S?2 
[0 0 2 7] JifgcOffi^lC^oX, WiJya^y^ 

[0028] *3PJm, *?ix^sa, fcsv^yy 30 
[0029] c^JSi^ffiftfi, **W^*K*S^PWI- 

[0 0 3 0] 40 

[0 0 3 1 ] Bit:, 50 
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— f>fy^i»», r** b ^y^y^-^ 1 0, 7 

f—^4 0, 7 s 4i/9A> 

[0 0 3 2] x** h y^^t: 0 ^ — ^ 1 0(1, Micros 
oft Windows95, Windows98, WindowsNTft ¥<D *} J V F 
^^t^SrW-TS I BM PCl*3y^-nfc 

1 bm pca&^ytf^. 
-^ir^tHC t** hy^yta"? 1 cm, x> 

r fc#*f* Li\ r** h 7^>t°a-^ 1 otft, 

IC, Kl 6 /^if^^yt-a. — ^J.— 

• 4>?-7x.-*mW;i 5iSffi»$ix5o Sot, * 
-v- Kl 6 ft, aytf^-^-ifrJST** h y 

[0 0 3 3] 7^yF^7 P nytV"^20k Micros 
oft Windows95, Windows98, IVindowsNTft 1£<D $ >( V K 

<5 0 "r** h yf^W=-—9 1 0 h 

5S:W"f 5o *v 1 0 0W4JEt, *y Y?- 

? 1 0 OSr^LTHUB'JffloBftT-^SrSttfeSr 

r-r v^>Mg¥«3 Ot^tt, h*- K3 6 ft if© 

1-5^"^- h* - K • ^v^-^^-^gR3 5^SftS 
$nxv^5 0 JEt, h!7-^ 1 0 OKliU— ^4 0 
hW^tlX^^ 0 Z<Dy— /MOli, DOS, Microsoft 
Windows95, Windows98, WindowsNT, UNIX (SSiS 

S) 4Jfot^u-f-f y^fASrttS I BM 
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[0034] ju-s s o#*s> i o o 

(sftffiao M^^yH ^y 

JEl^x ^y y^5 0*sSft LtcT-?<Dm^it%.Xf/X 

5 0 M^y 5 o», ^-r-w-K564Mp 

5 5lcSBHESHTV^5o £*iK«fcD* HA— K- 

^y?-7x-Xgf5 5^7-7- h#- K5 6 

LT, WS©BWSffi#lRl»t«)83*J^3^fPJBiJ*»iJ«i 

[0 0 3 5] r*^ h yf^lsVa- — 9 10© 

tilt? p ^ 7 A nTfg W * n y p ir y irft if CO ^ ife^S 
SB (CPU) 2 1 OSrgtfT** hyZ/aytTo.-* 

y^-7x-^ 2 2 0, *^yr>fy^7^^W> 30 

P ^tV7>f^^M y^-7x-7f57P5/tVf 
. j — 7 ^-^2 4 0, 7>f^^Wt>fy 
^-7x-Xf57>f^^l / ^ • ^^-7x-^ 2 5 

o, i o oic>ry^"-^^— h 

!7-^ • 4y$-7^-X 2 6 0, X^-r- K 

[0 0 3 6] yZ/<?J» • T^iTX • ^y (RAM) 2 40 
7 0^^yt:a-^/U2 0 0 \C4 V^ — y^ — 7, LX 

^*a8S (cpu) 2 i otc^^y jEttlc*— or^ 
y^y t LT«|g1-5c AftWl-tt, W^yA 

^v—^^^^H^T-rSt^lC, CPU2 10J2, r 

n^co^^-^-^^^ia^V^^ 2 8 0 (XHflfe^ 

^UJIEflO i^7V^7?«^!) (RAM) 2 
7 0C1P-KU RAM2 7 0frt>Ztlb<DJftM'7v ? 

y?i/XTi>><nTXfcm^WmW)t£ : T>i*t so 
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• ^!7yt°y^ft|:j;ot, T^y • ir^V y h£R 
^7yyi"5Ci:is-C$Scttt)S3ftSixfcv\ y- 

K^-^y-^^ey (ROM) 2 9 0(1, CPU210I: 

i/ay-i/^^i^ (BIOS) t£¥(D^^^y->Ty 

[0 0 3 7] lS7>f^^ 2 8 0tt, ^*^LSSB (C 
PU) 2 10^W^n^7^y-yy7?: 

Mit, ^v-r^f/7rA2 8i, yyy? 

F7^^2 8 2, K • -<y^-7x-^ • 

K7^^2 8 3, ^©I(DK7^^2 8 4, 17— K^P 
ir j/'>y^n^7A2 8 5, ^(Z)i^7 P P^7^2 8 
6, i^-^7 P n^7A2 8 7X^^7 7^/^ 

2 8 85:tMt6, 3^tf3.-^-5rSIEjK*«)— WTf*> 

5 0 ffiifi(7)tt5 5, t^^7^^7^28 1 I* 

v^y K>)ii^v-7>fy^7iNtfc5ct^ 

7>fy^7AS:«fflt5:it>^5o 7 p yy^F 

7^^2 8 211, ~/V y? 5 Oft¥<D'pt£< t h 1 
/^2 8 3ft 7v-h^7-Kl 

• ^y^-7x-xgti 5 v9— y^—^z>* 

h#- K • ^^-7x-^ 2 6 5 SrSgftXt/S'JW 
•r5aW(-*iJffl^ttSo ^COffi© K7>f^2 8 4KB:, 

[0 0 3 8] 7-F^Pt>7yy^7P^7^2 8 5 
|±, Microsoft Word, Corel WordPerfect ft £\ itl* 

t/H«fPj*ffl 0>-«W* ? - K^p ir y f-y p i?y A Tf 
$>5o ^©fficoyp^y^ 2 8 6ic(i, 7^ny^3 
ytV-^ 1 0Sr»ffS*fc5, gfaoT^y^-^a 
^^Utr^it^Oic^^^^ffioyp ^7^i^iti 

5 0 m^^-/^7 P P^y^2 8 7tt, Vyf^y 
fc: 0 ^.-^ 1 o*s^ y h^-^ 1 0 O^UTffiT-^— ^ 

JfyMsXfoZo ^<D{fc(Dy r-Y/i-2 8 8 (ifi, f^^ h 

^ i 0(7)Kj^;c^*7t^^> x«7 

[0 0 3 9] 0 3 14, 7 P yy^5 0(DW7-^7^f- 

^a^^t^yy y^-v- hfy7 p 5 7 Sr^tpyy >^ 
5 o«s*$*itv^5 0 yy 5 ottit, yy^^^ 

7 3 0 0W y?-7x-7jtlf;yD^7M^^ 
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$ uya± yVt£¥<Dty$MM?£:U (C PU) 3105: 

-atfo 3 o oicftHt;:, ^yy^sooy 

5SJ#pv ; ^^ 3 2 0, yy >?5 0<D$*££ftAttJ 

(BI^T) tiift-rSBWlcftfflSixS i/o 

* — k • >r 7:*— * 3 6 5, sr>vy 5 0£ 

4y?~y^-*3 6 oflsfg^s io 
[oo4o] yy 3 o otcftHi^ ^#^-14^ 

P^7^^EEPROM3 4 0 > 7 >ff AT^ 

ir^^^ey (ram) 3 7 0, yyy^^^y 5iM 
y — F^-^y— ^^ey (rom) 3 9o^^^tv^ 

6o R AM 3 7 0ft, -/V >?;<X 3 0 0\Z4 >?-y 
X-XUCPU3 1 Ofcy^yfStS^^T^ir^S: 
tiiftu miaotcpu3 1 OfDMff^^^fy^^r 

-^^^frfS CPU3 1 0li s rfl^co 20 

^tyffifr) ^UAM3 7 0i:n-Kl, RAM370 

5o ROM390ft, CPU3 1 0\Ctt1rZ>7>?- hT 

[0041] yyy^^^ysift cpu3i o^* 

?xy^/y.pv?^^3 5 1, Sfflp^^^ F7^^3 30 
52, I/0*-hK7^f^3 5 3, ^v-h^-M 
y*-?*-*- Fy-f/^3 5 4, m^it/'&J=r*i/y 
^ 3 5 5, #^tf?'J3 5 6, Wi07r^f^3 5 7, 

yyy^.^-r-hf^y- Ky^'"^ 5 82fctf«iM 

twKOTps^* K9^^3 5 2»4, yy sows 

tS<3^TW«36WJ$^5 i 5 ^y ^^500/ 

%mt$tiZ>o I/0#-hK9>f^3 5 3ft, I/O* 

- h 3 3 OSr^LTg^ftfcAtti^Sfi (BS*T) 

S:IBtti"6B»t3PJfflS*L6o h#- K • >f 

-7x-x • K9-f^3 54ft, h#— K • >f y 

#-K • ^y^-"7^-^ 3 6 5^rai-5@Wi^iJffl 
£tu :jii:j:ot, /yy^so^^^-h^-FS 

[0 0 4 2] Rf^L/ffi^ni/y^ 3 5 5ft, ^y 50 



#P?i? 2001-186358 
28 

fi#L<ftiM-5o «f*>ffW 3 5 6 tt, WSJ-fS^**) 

ffl$n^o ^<D{^(Dyr4 5 7dft, yyy^so 

^IH1^5fc&<^ coffin 

A^4ix5 fl yy y* • V^yf - K9>f^3 

5 8ft, «f*ft:/tt*B»"C^y • ^^hf^ 

StlSo Mi:t^-^o^A3 5 9ft, ^y^ 

^ 5 Oi^vy — ^ 1 0 OfrhWiTJ—fr* — 
[0 0 4 3] 134ft, t-^4 0(0«7-^rr^ff 

•7^^P7 p ntytiJ?(Z) t ^a^i (cpu) 41 

4 0 otcftHI-, ^^h7-^ioo}:^fy^-7x- 
*1rZ>*y YV—t • ^y^-y^-* 4 6 otfsj&££ 

ft TV 5 0 HI-, 7^7^^^*!) (RAM) 4 

7 0, @^r/^^4 l&tpy-K^yy-^y (r 

OM) 4 9 0 t ^ytV-^/U 4 0 0 C^$^T^ 
3o RAM4 7 0finyt°a-^/U4 0 0 Wy^- 

7x-^itcpu4 1 0 izx&j ^y IStiS— <DT? 

i?*£»WU -til:J:otCPU4 10^Wi^ 

>rw^y t Lxmm-fZa jy«^ft, ««yp^7 

^^-^y^^fftst^t^ cpu4ioft, 

:iif)^v'-y^S:l£f^^^4 1 (Xft^rtf) 
ffi^^^ey^ft:) HRAM4 7 0l:o-KU RAM 

4 7 o^^:Ji^rt«/p^7^y-^^^H 

^^yt^yh5:RAM47 O^I/HfeT"/^^ 4 1 
x/^^4 l^*7$/yi-5C.£^T*£5Ci t> 
fgf&£ft/cl\ ROM4 9 0ft, CPU4 10Mtt6 

[llM^V-f^V^^fA (BIOS) #£*£>^ 

[0 0 4 4] WfcTJ^Z 4 1ft, CPU4 1 O^Uff 

f^^7is4 11, 

• K9>f^4 1 2, 4 1 3, 

S-?^-/i-^ P p i ^y^4 1 4, fthftfU l 5SV-t^ 
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T^4 1 lttWx.ff, DOS, Window95, Window98, Windo 
wNT, UNIXftifO^V— r«r V^v^T &Vfo& 0 * 
y hy^^^y^-7x-^ • K9>f'*4 1 2(1, 
hI7-^100 ^4 0 H y?-7x-^f5^ 

O^^Hkr-^SrSftU ceo J: 5 fcTWSrflftrfT 
SCi:S:"5ItBlc-r5o If^-z^n ^7 A 4 1 4 14, 10 

f4, soft^i ^xt±*^on«ffl*Sflii- 

(Dlc^?|7i^^ffico^T^/^X(47 p n^5A^^^ 
[0 0 4 5] El 5 A}4 S V s X? hy^^ytV-^lO 20 

o^M^i^^e^-^-Hf^ !7— K^o-fey ^> 

ftOtt, 5 0«*<Dg|lXf4BftSft#«^ 30 

A^I-«toTC^BJB0^3y^7^ir^$iX3tt) , Xf4 

[0 0 4 6] ttoT*«Wtt, Mftx-^SrllNHbL 
ftiico^y tr°zr-^ • 3.— 9*Xf4^y h y — ^ 10 0 

^sw^yy^ (g^yy^^) ^i^t^awi;: 

[0 0 4 7] ftftttfctt, Z<D^ik-7v±Xi*, M 5 
T — ^ 5 0 1 (4, r** h jz/nyta-^ 1 OCDffjCl 

5£&3WSU\, Ittr-^ 5 0 lt*TiCi-5PP*J^ 
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{4, V- \?7v±yi/>?7uSfyJ±2 8 5*iCti#t£ 

t^^ift$>6c t &ffi^i- ^ r t u\, 
[oo4 8] co»su^iB-ett, yyy^Fy^^ 

2 8 2&Z<D^ik7v±x&&mLX7*—* 5 0 1$: 
Bt^tUfc^lr, CM^^hy-^10 0^LT7° 
V 5 0\cmtir6 o 7 P yy^K7^^2 8 2^\ *t 

5 0 15:, 9^^l^^*ttfcS*fr«5 1 OSrttfflL 

fbx-^) 5 0 2^Mt5 fl ;:*u;:<fc!K 

^kr-i? 5 o 2i4, mmtDMfom^ikT/^v xa& 

tf*tf*«5 1 0(7)3rt o -$r*1-5Kg-Ct^^^-C#^ 

-g-ikT-^ s o 2^yy 5 ot«s*ttixtf*e>ft 
i\, 7-? 5 o 1 4 / y y ^ 5 o twit6 i: ^ itt 
*^y7v&j£*M-5fcto, *h*«5 i o t> % @w^y 

*^"T5o -tix^^^M»(4, *»»lt*fkT/w=fy 

6 t BWSffl#^85«*t BW^y y^(7)^«Sr»^ 

[0 0 4 9] ^oTlH5 ACItjH- J: 5 yyy^50 

i:mn/y y^^BS»5 2 o^r, h^-^ 1 0 
flt^*#&7ca^A¥"f5o ftv^-e^y >^^4iM«5 2 0 

tztmm (xy v^«*#ft#fw» 5 1 1 srfttfM- 

ftil^AiKiXJ4^|ltJ* LTJUa-r- 5 - t J: 5 

yy 5 o <Dftmz.m#>&*ivrcx^- v^y-fs 7 
m^mmms 1 114, Bws«m*«is, rco^- 

[0 0 5 0] &h(D*iWm 5 1 0 ^Bt*ftf4, b y 
B WSif #/cit^TOJ i/ 3 -?*$t\m r> , tfotc^ t 
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Lfcxffiil (2@lfr#{fc#*W» 5 12SrMt5o - 
©2 0KfctOliff-gr{t;Stifc*t»li5 1 2(1, %um& 

[0 0 5 1] 0 5AlCMI-^-f <fc5H* 2[E][C^/c:J9St 

^y y^ic«tti-5ci:as-c#6o ^/5 5i«(o 

5 IS:, 2 0lcfefc9iit^bSixfc*rW«5 1 2Sr-&4 
[0 0 5 2] C©*F4UV^J6©^t8^tt, ^jx^flHl 

5 4O^20|:^/c«^t:^/c^l5 1 2(C7 P y 
^yK^t^^^5 5 1«^5 0 ^7^5 5 1 

^^551 Rmm^it'f-Z 5 0 2 fc^ft 
0S:fflV^T-^^5 5 lX^ftBtf-ftT-^ 5 0 2^ 

[0 0 5 3] t£oT, T-^/^yVa 5 5 3RXf^y? 

±5CUT^y^5 5 1 , ttftlfc^frr-* 5 0 2, x 
-?^^>a 5 5 3S0^5/^^v/a 5 5 4 Srt&S 
8(1^9 7 5 5 0asfP^$tl5 o Sft#8«K»5 6 Ott, 
X** h^a^tTa.-* 1 0Ot^J^V^2)^^f#^B»fW 

1*5 — (>X7- K 1 6 t£¥<D*^— h ^7— K^yW 



1 5%frLXn& 



10 



20 



30 



40 
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ft#tt»l«fl&« ^ S WX y y * tS^WM^ 3 7££ff 
[0054] c^-rst, i«Hfci±i;fr»8, ;o^- 

5^ir^x-#5 0 g^yy V* 5 OfifcV^ WJv-a 
7'5 5 0 (Djifi#<C>miI, EPB'Jv 5 3/550(0^^^5 
5 1 St/Bt^-ft^-^ 5 0 2 W^ttco^fl, 2 [UiC-b 
/-c<5Bt^ft$^fc*t^tt5 1 2©^, ftfcK, 
? 5 OTWJI-SfcfeWlit^T 1 '-^ 5 0 2 0«-^5rH 

[0 0 5 5] HI 5 A\C7jiLtcl$%-{kMl8.&*%m<?>ftt. 

mms 2 o^rffiffl Lmt^-r zzt ^-c-t^o t^ox 

2[eiBt^t:*t#sl5 i 2ii< s-f g^yy 

[0 0 5 6] 0 5BTii, 05AlC^Ufc^#«*fflV , > 

mv&WkT**}) *J*k t tfcttffl LT, g^PPffiv'a 
^i'P^aL/-CT-^^2[H^^/coTBt^k1-5 0 0 5 
B "Cx - ^ 5 8 1 H^EPftiJv'a^'lrBBabfcWJx- 



tt, ssft#ffi«« 5 6oii ( gflr 5 3 o t 



50 



(5 2 0) St>'gWSff#©^P^il (5 3 0) £ 

ttVFV&WkTA'Jy XASrffifflLTx-^ 5 8 1 

r 1 -^) 5 8 25r^i-'5„ ftV>-C/y V^^«5 2 
0 1 1 fcld^xt^Bt^bT/t- ^y XASrffiffl LXSff# 
mm^-it?-? 5 8 2Srfft?Bt^-ft;L, 2@]IC^fc5Bt 

mks &9:\m<r>®mmfrtmh&T- 9 zfe^-tz z 

k&X-ZftW 

[0057] Z<D£olC s m5B\cmLtzm%ikffil&& 
£WlZ%m\zmi&ir&Z i^-C#5„ El 5 B (75t#/5)c 

20(ci:^Bt^iiL/-cBt^b-7 : -^s-gW7 c y >^ 

iifi -r 6 m \z~. v ?r -&m%x $ nit ^ =>. m& ft 
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t t-C^So a5BCStr-?58 1 

»H5 1 0*:«tSr2fiPt#fl:i-5H5AOiiif^k;fll^J: 
5^IBtfe&sfc5fc«\ BIS AC0»S^k«*«)K5* s J: 9 

[0 0 5 8] 13 5 AtlK^VTH^fcL^r 

5 o 1 ©tt^aVWMSrttWi-Sfcfc^H^fcSo 

3 0 Ppgi]i/3y5 5 0tt, 05 Al^Lfct^tl^Cfll 

y\i a x.-$ l o^itjt^v^^^WJ^a^^yy 5 

aHS*^M«5 6 1 «\ ^^i|5 4 OCO^tC^^ft 

V\ ftV^SMS#^HWl5 6 1 ^y^y^T/^DX 20 
A5 7 0 ^y^5 5 l&mm^ 

5 5 3 SriSft#^IBIi 5 6 1 fcffiffl LTSSEL 
[0 0 5 9] PpgiJ^a^ 5 5 OSr^y 5 0© 

<D#^]4l5|:Aii> ^yy^5 0l:J;5^7^ 30 

fctifio t*ayf>f(Oifti^, £ft#8HB«5 3 1 
HmSrSctfC tdSt?#*V\ lot, 2@^fcfc«9Bf 

y^-^gfl5 s^Lxyy y^so^^^v-h* 

-K5 6C1^, tc-eSfS#WB«5 3 l^ffifflb 40 
T^«[^S-^£ft£ 0 toft, C<B»#Wl::«^$*t 
fc*M*«5 1 1 Sr*^- K5 6 jo^^y 5 0 

3fe£^ffi^f £o y 7 - r** h j co^ 

[0 0 6 0] ftl^T\ *mms 1 0 Srfljffl IT«§ 

ftf-^ 5 0 2^L, *yrr** ho^coT 2 - 

?5oi £t#5 0 I^^fcf-? 5 0 1 
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a l fc a*x ftes as h * w t « 5 c t i* -e 

[0 0 6 1 ] B5DI1, El 5BC*lfcfttiiKo 
T^^L/c2lE]^^t:^B'Jx~^ 5 8 3(0«^Xt/PP 

-7x-^ 5 5£^LTBWg{f#<7>*^- K5 
6}C«^tV, ifcV^ X-r— K5 60^(C$>5S 

fit 8««5 3 1 Srttffl tt«»«l:a^5ti5o ft^ 

-^ 5 8 2^yyy^5o ofMWcM-t- 0 

^tlfcx-^ 5 8 2^il7 P y 5 0(0^-7- 

y57(^s$n N z^x\ yy 5 ortco^-r- 
5/^5 7i^4ix5^y 5 2 1 ^ffifflLT^ 

^ica^-^^5o a#5ttfc r^yrj f-?5 8ii± 

7 fab?}) 5 OicS^^P 

[0 0 6 2] H5Barf5DtlB«tUfc«f*{k/ll*tt 
BWSff#«-*fi~5B^y ^^^©ft^PPWJSrfttti- 

Odfi*-^- hfy^5 7Xtf*-r- K5 6>$\ 

El 5 A&t>* 5 C \Ctf Lfc 2 «9 flf-^t: 

a far t tx*#5o 

[ 0 0 6 3] El 5 AiC^Lfc^^^y^yp-t^ti, y 
y 5 0 3fciT©SfS«Klt^#|j;flf-|rft7*-^ 5 0 2 

^tfc5f«^f-^^^>a 5 5 3S:««-r5c 
[0 0 6 4] r-^l-*)"t?)W^ft^^^v'^ 

^^LVVNy>y^7/Vrfy XASrfnWJT-^6 0 1 

f-^^5/y^6 10?:Mt5o ftV^-C, |5A(DS 
5 6 Oft^^^oSffllEttSrttfflLTT- 

/N5/v^6 1 1 SrffiftatR-Cllt^bUTt) ctv^ v>-f*x 

y v^-6 1 2tc=it 0 -$tv, BW^y -CBSES 
^ttttiEBWl-ttffl*ix5o 

[0 0 6 5] S7Alt *|gP^C0ff^ LV^Jg^^ffi^ 
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tuft, iT I D 7 0 1 , SSfS # I D 7 0 2 

I D 7 0 1 , SlfS# I D 7 0 2 2fctf*HMI 7 0 3 L 
£HffU ^yv'a 7 2 0«rfft£1-5 o &^T\ 0 5 A 

1 «:f&£-r5o &V^T\ #^y>^ 7 2 1 £ffi£ 

MiRX^^itLXh <fcv\> v^^©#^t#*#*^y 

7 2 1 tt**f+#^y^a 7 2 2 il^ tf—Sft, — 
y^7 0 QiZ&SZtlZo 

[0 0 6 6] Sff# I D 7 0 1 ft, ^117 - yi/-yr 
^h7*-vy h£)££§{f#I D711l:3f-J 
tly ^^^7 0 0C^Jtl5 0 ft#i:LT, BWSif 

ft#I D7 0 lSrPff-^kU Sff*I D7 1 lt^t: 0 - 

s^yy^^ft, ^^y*s«t*ofcfticsfs#iD7 

ffl^Ti£ff#I D 7 0 2£rB£^fcLTt> «fcV\, fflL, C 

7 0 2ftSff#I D7 1 2lC^¥~£tl^ ^y¥l 0 0 
iC^StiSo *t*MS7 0 3ttH5AC^Lfc«t5l-2 
EIWHHbU »:V^2le]Bff^k^«7 1 3 LT^jy 
^70 C fcjJW* U\ 30 

[0067] ns^bT 5 -^ tftJS'Jtaw^y y^i-^lf 

07 B tC^i~ 0 ftftlfttCft, ftUJl-Sff # I D 7 5 1 , 
£{f# I D 7 5 2, S»i7 5 3St/^^7t-A ■ V 
. n^r-^ (URL) 7 5 4^^y77v-yr 
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I . Title c f Invention 

IMAGE OUTPUT METHOD AND APPARATUS THEREOF AND MEDIUM 
2 . Claims 

(!) A method fcr secure t r a n smi s s i c n cf data to id intended image oitpvt 
device, wherein the data tan he used to generate an image at the intend 
ed image output device in the presence of in intended recipient, the net 
hod comprising: 

an encrypling step of twice caciypting the data using a first key an 
d i second key, the first key being a puklic key of a first private key/ 
public key pair, a private key cf tiie first private key/pablic key pair 
bciig primarily in the sole possession of the intended image output devi 
ce, and the second key being a public key of a second private kef /public 
key pair, a private key cf the second private key/public key pair being 
primarily in the scle pessessien of the intended recipient of the image 
; and 

a transmitting step of transmitting the twice-encrypted data to the 
intended image cntpit device. 

(2) A method for secure transmission of data to an intended image output 
device, wherein the data can be used to generate an image at tie intend 
ed image cotput device ia the presence of an intended recipient, the net 
h c d ccrnpris ing: 

a first encrypting step c f encryptic? the data using a first key; 

a second encrypting step of twice enciypiing the first key using a s 
c c o n d key and a third key, the second key being a public key c f a first 
private key/aablic key pair, a private key of the first private key/pub! 
ic key pair being primarily in the sole possession of the intended image 
output device, and the third key being a public key of a second print* 
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key/public key pair, a ..private ke) of the second private key/public key 
pair being primarily intiie scie pcssessiQD of the la tended recipient o 
f 1 h e i ma g e ; and 

a transmitting step of transmitting the encrypted data and the twice 
-encrypted first key tc the intended image outpnt device. 

(3) A method according to Claim 2 , wherein the first key is r a n d c m I y gen 
e r a t e d . 

(4) A ratthed acccrding tc Claim 2, wherein the first encrypting step iti 
Hies a symmetric encryption algorithm. 

(5) A method acccrding tc Claim 2, wherein the second encrypting step ut 
ilizes in asymmetric encryption algorithm. 

(6) A method according to Claim 2. wherein the second encrypting step e ■ 
crypts the first key using the second key before encrypting the first ke 
y ising the third key. 

(7) A method acccrding tc Claim 2, wherein the second encrypting step en 
crypts the first key using the third key before encrypting the first key 

osing the s e c c a d key. 

(8) A method acccrding to Claim 2, therein, in I h e transmitting step.tk 
e twice-encrypted lirst key is ccatained in i header which also contains 

information related tc the identity of a device initiating the secure t 
r a o sm i s si c n , 

(9) A method acccrding to Claim 2, wherein, in ihe transmitting step, Eh 
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e twice-encrypted f i i s t „k e y is contained in a header which a 1 5 c contains 
information related t c the identity c f a pciscn i a i t i a t i n g the secure t 
ransmissicrj. 

(10} A metbed according to Claim 9, further comprising: 

a hashing step cf process ing tbe header and the encrypted data with 
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in the sole possession n I the person initiating the secure transmission 



wherein the t t a i sm i t t i n r step further transmits the signed header ha 
s h and the signed data hash. 

(U) A method according tc Claim 2. wherein the intended image citput de 
vice is a printer. 

(12) A method according to Claim 2, wherein the intended image ottpjit de 
vice is a facsimile machine, 

(13) A method fcr secure transmission cf data to an intended image cnt.pc 
t device, wherein the data can be used tc generate an image at the intco 
ded image cot put device in the presence cf an intended recipient, tie me 
thed comprising: 

a first encrypting step of encrypt id? tic d a i a asing a first ktj: 
a secend encrypting step cf twice encrypting the first key using a S 
ecoad key and a third key. the second key being a public key o i a first 
private key/public key pair, a private key c f the first p r i t a t e k e y/p u b I 
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ic key pair being primar-ily in the sole pessessien of Lhe intended image 
cntpot device, and the third k e 7 being a public key of a second private 
key/public key pa i r T a private key (if the second private key/pohlic key 
pair being primarily in the s c I e possess ion cl the intended recipient rj 

f the image; 

1 generating step of generating 3 leader containing the twice eicryp 
ted first key; 

a first transmit tiog step ef transmitting the header to the intended 
image cutptt device; 

a receiving step of r e c e L v i h g a request from the intended image outp 

ut device for the encrypted data; and 

a second transmitting Step cf transmitting the encrypted data tc the 
intended image output device. 

(14) A method according tc Claim 13 : wherein the first t r lotni tt i i£ step 
transmits the header tc the intended image * n t p n t device by e-mail- 

(15) A method according tc Claim 13, wherein the header «hich is geneiat 
e d in the generating step also contains a reference to a location c f the 

encrypted data, and wherein the request fcr encrypted data contains the 
reference to the 1 0 c a t i c t cf the encrypted data. 

•16) A method for generating an image from l * i c «- e 0 c r y p t e d data transmit 
ted tc an intended image cutpu device, wherein the twice-encrypted data 
can be nscd tc generate the image at the i mended image output device i 
n the presence of an intended recipient, the method comprising: 
a receiving step of recfifinjl twice-encrypted data: 
a decrypting step af twice decrypting the twice-encrypted data using 
a first key and a second key. the 1 i r s t key being a private key of a f 1 
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rst private key/pulilic ke-y pair, the private key gf the first private ke 
y/public key pair being primarily in the sole possession of the intended 
recipient of the image, and the second key being a private key of a sec 
on d private key/public ley pair, the private kej of the seccoa private k 
ey /public key pair being primarily in the sole possession of the i n t e n d e 
d image output device; and 

ao image generating step cf geaerat ing an image from the decrypted d 

a t a . 

(17) A method for generating an image from data t r a a smi 1 1 e d tc an intend 
ed image citput device, wherein the data can be used to generate the ima 
ge at the intended inage oitput device in the presence of an intended re 
c i pi eot , the me the d comprising: 

a receiving step cf receiving encrypted data and a twice-encrypted f 

i r i t key; 

a first decrypt log step cf twice decrypting the twlceencrvpted firs 
t key using a second ley aad a third key. the second key being a private 
key cf a first private key/public key pair, the private key cf the firs 
t private key/public key pair being primarily in the sofe possession ct 
the intended recipient of the image, and the third key being a ptivate k 
ey cf a second private key/public key pair, the private key cf the sec on 
d private key/public key pair b e : n g primarily in the sole possession of 
the iatended image output device; 

a second decrypting step of d e c t j p i i t g the encrypted data using the 
decrypted first key: and 

at image rencritiaf Step of generating an image from the decrypted d 

s t a . 

(18) A method according Lo Claim 17. *he-ein the first decrypting step u 
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tiliies an asymmetric decryption algorithm. 
0 9} A method according to Claim 17, where 
utilizes a symmetric decryption algorithm. 
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dence . 

(23) A method according to Claim 17, wherein the 
ee a smart-card possessed by the intended recipi 
key is hidden from recipients other than the int 

[24) A method according tc Claim 17 ; wherein the 
receives a signed header lash and a signed data h 

comprising a verifying step cf verifying the aui 
rity cf the signed header hash and cf the signed 
C 2 5 ) A method according tc Claim 24 ; further c era p 
arding the encrypted data rather than cq: putting 



eccnd key is contained 
nt. whereby the second 
nded recipient, 
eceiving step farther 
s h , the method further 
eoticitj and the inceg 
a t a hash. 

i s in g the step of disc 
n image biSea upon the 
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encrypted data, if ;ht -signed header hash ur the signed data hash fail 
the Ferificaticn cf auLlicsti c L ty a o d integrity. 

(26) A method according tc Claim 25. further comprising the step of send 
i ng a not ice tc a sender cf the signed header , if the signed header hash 

or the signed data hash fail the verification cf authenticity and i u t < g 
r i t y . 

(27) A me t b a d accord inj tc Claim 17, wherein the intended image output d 
erice is a printer. 

(28) A method according tc Clain 17, wherein the intended image citput d 
e v i c e is a facsimile machine. 

(29) A method for generating an image from data transmitted tc an intend 
ed image output device, wherein tfae data can be used tc generate the inn 
ge at the intended image output device in the presence cf an intended re 
cipient, the method comprising: 

a receiving step of receiving a header containing a twice-encrypted 
first key; 

a sending step ol sending a request for encrypted data corresponding 
icihe header; 

a receiving step of receiving encrypted data corresponding tc the he 
a de r ; 

a first decrypting step of twice decrypting the i w i c e -e a c r yp t e d firs 
t key using a second key and a third key. the Secern key being a private 
key cf a first private key/pub !ic key pair, the private key of the firs 
l private key/public key pair feeing primarily in the sole possession cf 
the intended recipient of the image* and the third key being a private k 
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ey cf a second p r i t a t € Ley /public key pair, the private key cf the sec on 
d private key/public key pair being primarily in t fe c sole possession cf 
the intended image uutpit device; 

a second deciypting Step of decrypt ing the encrypted data using the 
decrypted first key; and 

aa image generating Step of generating an image frcm tte decrypted d 

a t a . 

[30} A method according to Claim 29, wherein the header is received in t 
lie receiving step bj e-ma i I . 

[31) A method according tc Claim 29, wherein the header also contains a 
reference to a location of the encrjpted data, and wherein the request f 
or encrypted data contains the reference tc the lecatien cf the encrypte 
d data. 

(32) An apparatus for secure t r a n s m i s s i c n ci data to an intended image c 
utpat device, wherein the data carj be used to generate an image at the i 
□tended image output device for receipt by an intended recipient, the ap 

para t n $ comprising: 

a memory including a region for storing executable process steps and 

data for the image; and 

a processor for executing the e i < c 1 1 a b 1 e process steps; 

wherein the e.xecatablc process steps include (a) an encrypting step 
of twice encrypting the data usiog i firs: key and i second kc?. the fir 
st key being a public kev of a first private key/public key pair, a priv 
ate key of the first private key/public key pair being primarily in the 
scle pessessien cf the in tended image output device, and the secend key 
beiot a pnblic key ol a secend private key/public key pair, a private ke 
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y of the second p i i y a i e - k « y/u u b I i c key pair b e i n ? primarily in the s c 1 c 
possession ol the intended recipient cf the inage; and (b) a t r a c sm i t t i b 
g step af t r a nsm i t t i ng the twice-encrypted data to the intended image 01 
t p u t device. 

(33) An apparatus for secure t r a fl sn i s s i o a of data to an intended image o 
itpit device, wherein the data can be used to generate as image at the i 
Mended [male output device in tie presence cf an intended recipient, t h 
e apparatus compr i < ing: 

a memory including a region for storing executable process steps and 
data for the image; and 

a processor for exe crj t i ng tbe executable process steps; 

wherein the executable process steps include (a) a first encrypting 
Step of cocrypting tbe data using a first key; (b) a second encrypting s 
tep cf twice encrypting the first key using a second key and a third key 
, tbe second key being a public key cf a first private key/public key pa 
ir. i private key cf tic first private key/public key pair being primari 
I? in tie sole possession of the intended image output device, and the t 
hird key being a public key cf a second p r irate key/pnblic key pair, ap 
rivate key of tbe second private kcy/piblic key pair being primarily id 
the sole possession cf the intended recipient cf the image; and (cj a tr 
ansraitting Step cf transmitting tbe encrypted data and tie tffice-encrypr 
ed first key Lo the intended image output device. 

(34) An apparatus according to Claim 33, wherein the lirst key is random 
ly generated. 

(35) Ao apparatus according to Claim 33, wherein the firs, encrypting s f 
e p utilizes a s yam e ; r i c encryption a S g o r i r. h m . 
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[36} An apparatus according t c Claim 3 3, wherein the secend encrypting s 
tep utilizes an asymmetric encryption algorithm. 

(37) An apparatus according tc Claim 33, wherein the s € c o d d encrypt io^ s 
tep encrypts the lirst key nsing the secend key before encrypting the li 
r s t key e s i n g the third key. 

(38) Ad apparatus according tc Claim 33, wherein the S ecfl n d encrypting s 
tep encrypts the first key using the thiid Uf before encrypt i a g th« fir 
st ley using the second key. 

(39) An apparatus according tc Claim 33, wherein, in the transni t t S ig st 
e p , tte twice -encrypted first key is contained in a header which also co 
mains information related to the identity of a device initiating tie se 
care transmission. 

(4 0) An apparatus according to Claim 33. w herein, in the transmitting st 
ep, the twiccencTypted first key is contained! in a header which also cc 
ntatos information related tc the identity of a person initiating the se 
care transmission. 

(41) An apparatus according to Claim 4Q, wherein the executable process 
Steps farther comprise: (d) a hashing step cf processing the header and 
the encrypted data with a hashing algorithm, resulting in a header hash 
and a data hash; and ' e ) a signing step cf digitally signing the header 
hash and the data hash with a private key of a third private key/public 
key pair, the private key cl the third private key/public key pair being 
primarily maintained in the sule possession cf the person initiating th 
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< E c c c r e transmi ss lqd ? w Ji e r e i n the t r a n s ra i 1 1 i i g step 1 a : t h c r transmits t 
&e signed header hash and tbc signed data hash, 

(42) An apparatus according t c Claim 33, where in the apparatus is a cflrap 
iter and the intended image oitpot device is a printer. 

(43) An apparatus according tc Claim 33, wherein the apparatus is a ccmp 
iter and the intended image ontpit d e f i c e is a facsimile machine. 

(44) An apparatus according tc Claim 33, wherein the apparatus is a firs 
I facsimile machine and the iotended ima^e output device is a second fac 
simile machine. 

(45) An apparatus fcr secure transmission cf data tc an intended image o 
atpit device, wherein the data can be used tc generate as image at the i 
Btended image output device in the presence cf ac intended recipient, th 
e a pp a r a 1 1 s c cmpr i s i eg : 

i merer j itcludicg a relict fcr storing executable process steps and 

data fcr the Image; and 

a processor fcr executing the executable process steps: 
wherein the executable process steps include (a) a first encrypting 
step cf encrypting the data using a first key; (b) a seccud encrypting s 
tep (if tvice encrypting the first key using i second key a a □ a third key 
T the second key being a public key of a first private key/public key pa 
ir, a private Lev cf the first private key/piblic key pair being prima ri 
It in the sole possession of tie intended image ontpm device, and tie t 
bird key being a public key cf a second private key/public key pair, a p 
rivate kef cf tic second prifate kev/puolic key pair being primarily in 
the SCle possess ion e f :hc in leaded recipient of the image; (c) a genera 
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ting step cf general i ng .a header containing the twice-encrypted first ke 
y; (0 a first t r > nsmi it i og step cf transmitting the he a d e t t c the i r, ten 
ded image cat put device; (e) a receiTicg Etep cf receiving a request ire 
m the intended i si a g e output device for the encrypted data; and (f) a sec 
ond transmitting step of transmitting the encrypted data tc the intended 
image output device. 

(46) A method according to Claim 45, therein the first transmitting step 
transmits the header to the intended image output device by e-raik 

(47) A method acceidiog to Claim 45, Therein the header which is generat 
ed in the generating step ihs contains a reference tc a location cf the 

encrypted data, and wherein the reqetst for encrypted data ccniains the 
reference to the location cf the encrypted data. 

US) An image cntpct device fur generating an image from data transmits 
d to the image output device, therein the data cao be used tc generate t 
he i via g e at tiie image on t pit device in the presence cf an intended recip 
ie«t, the image out pat device comprising; 

a receiver for receiving twice~encrrpted data; 

an image generator for generating an image f r en image data; 

a turnery including a region for storing executable process steps and 
data ; and 

a pieces sct fnr executing the executable process steps, wherein the 
executable process seeps include: (a) a decrypting step of twice decryp 
ting the twice-encrypted data using a first key and a second key. the f i 
rsi key being a private key of a first private key/poilic key pair, the 
private key cf the first private kcy/p^blic key pair being primarily in 
the t C ! « possessing ci the i o i e a a c d recipient cf the image, and the sccu 
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ad key be i o g a private k-ef cf a second private key/piblic key pair, the 
private key cf the second private key/piblic key pair being primarily i o 
tte sole possession cf the intended image output device; and (b) an ima 
ge generating step cf generating an image from the decrypted data. 
(49) Ad image output knee for generating a o image from data t r a ft smi 1 1 e 
d to the image output device, wherein the data can be used to generate t 
he image at the imige output device in the presence cf an intended recip 
lent, the image output device comprising: 

a receiver fcr receiving encrypted data and an t w i c e - e ft c r y p t e d first 

key ; 

ao image generator for generating an image fjem iaiage data; 

a memory deluding a region fcr storing executable process steps and 

data; aad 

a processor fcr excelling the execstable pieces? Steps, wherein the 
eiecutabU process steps include: (a) a first decrypting step of decryp 
tiig the twice-encrypted first key using a second key and a third key, t 
he second ley being a pr i rat e key cf a first private key/public key pair 
the private key of the first private key/public key pair being primari 
ly in tie sole possession of the intended recipient cf the image, and th 
e third key feeing a private key cf a seccad private key/public key pair, 

the private key at the seccrtd private k c y-/p a b 1 i c key pair being primari 
If io the 5de possession of She intended image cutp»t device; it) a sec 
and decrypting step of decrypting the encrypted data u E i n g: the decrypted 

first key; and U) an image generatiig step cf generating an image from 

the decrypted data u&ing the image generator. 

[50) An image ouipn: device according : © Claim 49, wherein the first 3 e c 
rypliig step itilizes an asymmetric decryption a i g c : i i hra . 
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(51) Ad image output d e v J c e according t e Claim 4 9 ; therein the second d e 
ciyptiag step itilizes a symmetric decryption algorithm. 

(52) An image output device according tc Claim 4 9. wherein the first dec 
r y p t i n g step decrypts the first key using the second key before decrypti 
d g the first key using the third key. 

(53) /W image output device acccrd inp tc Claim 49, wherein the lirsi dec 
xjptiag step decrypts the first key csing the third key before dcciypti n 
g the first key using the second ley. 

(54) An iaage output device according tc Claim 49, wherein the third key 
is contained within the image cutput device, whereby the third key is p 

rimarily shielded from access by devices ether than the image cutput dev 
ice. 

(55) A a image output device according tc Claim 49, wherein the second ke 
y is ccutaioed in a smart card possessed by the intended recipient, * h t r 
cby the second key is hidden frcm recipients other than the intended rtc 
i p i e at . 

(56) An image output device according tc Claim 49, therein the receiving 
step further receives a signed header hash and a signed data hash, tb.e 

executable process steps further comprising i verifying step of verify in 
g the authenticity and integrity cf the signed header hash and cf the si 
goed data hash. 

(57) An image output device according tc Claim 56, wherein the executabl 
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e process steps furl her tc uprise the step nf discarding the encrypted da 
la rather than ouiputti&j an image, if the signed header bash or the s i g 
n e d data hash fail the verification of authentic itv and i d L e g r i L j . 

(58) An image output device tc Claim 57, wherein the executable pieces* 
steps further comprise the step of send i a g a notice tc a sender c\ the s 
i g o e d header, if t li c signed header hash cr the signed data hash (ail the 

verification of authenticity and integrity. 

(59) An image output device according tc Claim 49, wherein the image cut 
pat device is a printer. 

(6 0) An image output device according tc Claim 49, wherein the image cut 
put device is a facsimile macfiisc. 
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eccnd key and a third ley. the second key being 3 private key of a first 
pr irate kef/public kef pair, the private key the first prime tey/p 
ublie key pair being primarily in the sole pesscssico cf the intended re 
cipieot of the image, and the third key being a private key cf a s e c c n d 
private key/public key pair, the private ley cf the second private ley/p 
ublic ley pair being primarily in the sole possession cf the intended i m 
age output device; (d) a secend decrypting step cf decrypting the eccryp 
ted data ising the decrypted first key; and (e) aa image generating step 
cf generating an image from the decrypted data. 

(62) A method according tc Claim 61, wherein the header is received by e 
-ma i I , 

(63) A method according tc Claim 61, wherein the header also contains a 
reference tc a location of the encrypted data, and wherein the request f 
cr encrypted data contains the reference to the location cf the encrypte 
d data. 

(H) A compiler-readable medium which stores c omp u L e r~exe c u t ab I e process 
steps which securely transmit data tc aa intended image output device, 
wherein the data can be used to generate an image at the intended image 
citpnt device in the presence cf an intended recipient, the ccmputer-eie 
cntable process steps comprising: 

a data generating step 1 6 generate data fcr aa image; 
an encrypting step t c twice encrypt the data using a first key and a 
second key, the first kev being a public It 1 5 cf a first private ke y/pob 
lie key pair, a private key cf the first private key/public lev pair b e i 
q g primarily in the sole possession cf : b e intended image catput de?ice. 
and the secend key fa e 1 in {? a public ley u f a second private 1 e y/p u b 1 I c k e 
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y pjir, a private key cf. the second private key/public key pair being pr 
imarily in the sole possession cl the i q t ended recipient of L n e image; a 

nd 

a transmitting step to transmit the twice-encrypted data tc the inte 
nded image c a t p a t device, 

(65) A computer-readable medium which stores computer-executable prcces? 

steps which secirely transmit data to an intended image output device, 
wbeicin the data can be nsed tG generate an image at the intended image 
output device in the presence cf an intended recipient, the c orapa t er- exe 
eatable process steps comprising: 

a data gene r a t i Bg step 1 1 generate data Ict an i cna | e ; 

a first encrypting step to encrypt the data o s i d g a first key; 

a second encrypting step t c c d c r y p t the first k e j twice a s i a g a s e c c 
od key and a taird key, the second key being a public Icy of a first pri 
vatc key/public key pail, a primLe key cf the first private key/public 
key pair being primal i 1 y in the Sole possesncn cf the intended image ca 
tput device, and the third key being a public key cf a sccoad private ke 
y/pubiic key pair, a private key cf the second private key/public keypa 
ir beia? pi inarily in tie sole possess Inn cf the intended recipient cl t 
he image : and 

a transmitting step to transmit the encrypted data and the t*ice~enc 
rypted first kef tc the int coded image output device 

166) A computer-readable medium according tc Claim 65. wherein the fwst 
key is randomly generated . 

(67) A computer-readable medium acccrding tc Claim 65, therein the first 
encrypting step utilize? a symmetric encrypt ten algorithm. 
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(68) A computer-readable- medium according to Claim 65. therein the seccn 
d encrypting Step utilizes an asymmetric encryption algorithm. 

(69) A computer-readable medium according to Claim 65, wherein the seccn 
d encrypting step encrppt & the first key using the second key before e n c 
r y p t i n g the first ley n S i n g the third key, 

(70) A compater-readable indium according to Claim 65, wherein the secon 
d encrypting step encrypt? the first key using the third key b e f g r e eoci 
ypting the first key nsing the second key. 

(71) A computer-readable nedium according to Clain 65, where id, in the t 
ransniitting step, the tw i c< -e o c r y p t e d first ley is contained io a header 

which also contains information related to the identity af a device ini 
tiating the secure 1 1 a d sm i s s i o n . 

(72) A compu tcr-read abl e medium according to Claim 65, ^herein, io the t 
lansmittiag step, the twi c< encrypted first key is contained in a header 

which also contains information related to the identity of a person ioi 
tilting the secure transmission. 

(73) A c otipu t er -r e ada b I e medium acccrding tc Claim 7Z ? wherein the compi 
ter-e*ecutablc process Steps further comprise: 

a hashing step tc process the header and the cicrjpted data with a h 
ashing algorithm, resulting in a header hash and a data hash: and 

a sig&ing step tc digitally sign ihe header hash and the data hash w 
iU a pr irate key cf a third private key/pabilc key pair, the private ke 
y of the third private key/public ke? pair being primarily maintained io 
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the s c I e possesion of _the person initiating the secure trans miss ice, 
wherein the transmitting step further transmits the signed header ha 
s h and the siloed data fc a s h . 

(74) A computer-readable medium accerding tc Claim 65, wherein the inUn 
d e d image cutpat device is a printer. 

(75) A computer - readabl e medium accciding to Claim 65, wherein the iaten 
ded image cutpit device is a facsimile machine. 

(76) A ccmp a t e r - r e ad a fa I e medisra which stores c cmpt t e r - e x e c u t a b 1 e process 
steps which securely transmit data tc an intended image output device, 

wherein the data can be used tc generate an image at the intended inage 
output device in the presence of an intended recipient, the c cup u t e r-e i e 
eatable process steps comprising: 

a data generating step tc generate data fcr an image; 

a first eiciypt iig step t c encrypt the data n S i n g a first key; 

a second encrypting step tc twice encrypt the first key ising a secc 
nd key and a third key, the sec cad key being a public key c-f a first pri 
»ate key/public key pair, a private key cf the first private key/public 
key pair being primarily in the sole possession of the intended image ,c i 
tpat device, and the third key being a public key cf a second private ke 
y/pnblic key pair, a private key cf the second private key/public key pa 
ir being primarily in the sole possession cf the intended recipient cf t 

he icage: 

a generating Siep t« generate a header containing the tw i c c-e n c r y p » e 
d first key; 

a first transmitting step to transmit the header tc the intended ima 
g e output device: 
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a receiving step tc -receive a request from the intended image u n t p u i 
device f c t the encrypted data; and 

2 second transmitting Step tc transmit the encrypted data tc the in I 

coded image output device. 

(77) A computer-readable medium according to Claim 76, therein the Mrs! 
transmitting Step transmits the header tc the inteaded image cntpct dev 

ice by e -na i I . 

(78) A computer-readable medium according tc Claim 76, wherein the hcadc 
t which is generated in the generating step also contains a reference tc 

a location of the encrypted data, and wherein the request for encrypted 
data contains the reference to tic location of the encrypted data, 

(79) A computer-readable medium which stores c smpi ter-e*ecu table process 
steps fcr generating an image I rem twice-encrypted data transmitted tc 

an intended image output device, wherein the twice-encrypted data can be 
used tc generate the image at the intended image cutput device in the p 
resence of an intended recipient, the computer-executable process Steps 
c cmp rising: 

a receiving step to receive t w i c e ~e n c r y p t e d data; 

a decrypting step to twice decrypt the t w i c e - e nc r y p t e d data using a 
first key and a second Ley, the first key b e i n £ a private key c f a first 

private key/public key pair, the private key of the first private key/p 
cblic key Pair beiig primarily in the sole possess inn cf the intended re 
cipient cf the image, and the second key being i prime key cf a second 

private key/public key pair, the private key of the second private key/ 
public key pair being primarily in the sole p o s £ e s si c n c f the inteaded i 
Eage output device; and 
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an image generatiiiR -step tc generate an image F r cm the decrypted d a t 

i ■ 

(80) A computer-readable media m which s Lores computer-executable process 
steps for generating an image J i o m data transmitted to an intended i ma g 
c output device, wherein the data can iie csed tc generate the image at t 
he intended image output device in tbe presence of an intended recipient 
, tbe conputer-ejtecutab ! e process steps c ocp r i s i n g : 

a receiving step tc receive encrypted data and a twice-encrypted fir 
st ley; 

a first decrypting step 1 1> twice decrypt the twice-encrypted first k 
« y using a Second key and a third key, tbe second key being a private ke 
y cf a first private key/public ley pair, tbe private key of the first p 
rivatc lie? /public key pair being primarily in the scle possession cf the 

intended recipient cf tbe image, and the third key being a private key 
of a second private key /public key pair, the private key of the second p 
rifite key/public key pair being primarily in the sole possession cf the 
intended image output device: 

a second decrypting step tc decrypt the encrypted data nsing the dec 
rypted first key; and 

an image generating step tc generate an image frca the decrypted d a t 

a . 

(SI) A compiter- readable medium according to Claim SO, wherein the first 
decrypt iag step 1 1 i 1 i z e S an a s y mme 1 1 i c decrypt i&d algorithm. 
(82) A computer-readable medium according to Claim SO, wherein the secco 
d decrypting step utilizes a s yrnme trie de c r y p : i cn algorithm. 
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(83) A ccmputer-ieadable-medinm accord iof t c Claim 80, wherein the first 
decrypting Step decrypt? the twice-encrypted first key using the secend 
key before decrypting tie twice-encrypted iiist key using the third key 

(84) A computer-readable medium according to Claim 80. wierein tic first 
decrypting step decrypts the twice-encrypted first key using the third 

key Isiorc decrypting the twice-encrypted first key asiof tie secend key 

(85) A c pmpi t e j - r e a d a b 1 e medium according to Claim 80, wherein tie third 
key is contained within the intended image cntpat device, whereby the t 

bird key is primarily shielded froc access ky devices other than the int 
ended image output device. 

(8S) A c cmpi t e r-i e a d a b 1 e medinm acceding tc Claim 8 0, wherein the seeon 
d key is contained in a smart -card possessed by the intended recipient, 
whereby the second key is hidden frcm recipients ether than the intended 
recipient. 

(87] A c ompi t e 1 -r e ad ab 1 e mediom according tc Claim SO, wherein the recei 
ving step farther receives a signed header hash and a signed data hash,, 
the method further comprising a verifying step cf verifying the antheriti 
ciLy and the integrity Gf the signed header hash and cf the signed data 
hash. 

(88) A computer-readable medium acccrding U Claim &7 . further cccprisin 
g the Step cf discarding the encrypted data rather than cutpntting an i ra 
age based upon the encrypted data, i! the signed header hash cr the sign 
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ed data hash fail the y e-f i f t c a t i o n cf auttecticity and integrity. 
(89) A ccmpttei-readablc medium according to Claim BS, fuitker ccrnprisiri 
g the step of sending a notice tc a sender of the signed heider, if the 
signed header hash or Ihe signed data hash fail the Terificaticu cf a u t h 
euticity and integrity. 

(50) h computer-readable medium according to Claim 8Q, therein the inien 
ded image output device is i printer. 

(91) A c cmpn t « i -r eada b I c medium according tc Claim 80, Therein the inten 
ded image output dcrice is a facsimile machine. 

(92) K tnrapn 1 1 r -r c ada b I c medium which s!crcs c Dmprj t e r - ex e c u t a b 1 c process 
Steps for generating an image frcm data transmitted tc an intended imaf 

e cutpot devict, wherein the data can be used tc generate the image at t 
he intended image cutpit device in the presence cf an intended recipient 
, the computer-executable process Steps comprising: 

a receiving step to receive a header containing a twice-encrypted fi 
r s t key; 

a sending step to send a request for encrypted data corresponding to 
the header; 

a receiving step tc receive encrypted data corresponding tc the head 

er ; 

a first decrypting step to twice decrypt the twice-encrypted first k 
ey using a second ley aad a third ley. the second ley being a private ke 
y cf a lirsi private key/public key [> a i r , the private \z? cf the first p 
rivate kej/pnblic key pair being primarily in the s u I c pesscssien cf the 
intended recipient cf the image, acd the third key being a private key 
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uf a sec end private kef /public kef pair, the private key cf the second p 
rivatc key /public key pair being primarily in Ike sole possession c f the 
intended image output device; 

a second decrypting step to decrypt the encrypted data using the dec 
r f p t c d f i r < t key; and 

an image generating step to generate an image from the decrypted d a t 

a . 

(93) A computer-readable medium acccrdiog tc Claim 92, therein the heade 
r is received in the receiving step by e - ma i 1 - 

(94) A method according tc Claim 92 ? wbeiein the header also contain? a 
reference to a location cf the encrypted data, and wbereia the request f 
cr encrypted data contains the reference tc the lecatioo of t a e encrypte 
d data. 

[9 5) A printer driver which securely transmits data tc an intended print 
er, wherein the data can be used tc generate an image at the intended pr 
inter in the presence of an inteaded recipient, the printer driver ccmpr 
i s i ig : 

data generating code f c I generating data for an image; 

encrypting cede for twice encrypting the data nsing a first key and 
a £ecood key, the first key being a p on lie key of a first private key/pu 
blic key pair, a private key cf the first private key/public key pair be 
ing primarily in the E file pessessiut cf the intended image output device 
. and the secend key being a public key cf a second private bey/public k 
cy pair, a private key cf the second private key/public key pair being p 
rimarily in the sole possession cf the intended recipient cf the image; 
and 
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transmitting cede fcL t f i n smi t t i n g the twice-encrypted data t c the i 
niended ioage o a t p 1 1 device. 

(96) A printer driver which securely transmits data to an iatcotled print 
ci, wherein the data can be used to generate ao itiage at the intended pr 
inter in tie presence cf an intended recipient, the pT inter driver comp: 
i S i ng : 

data generating cede fcr generating data fcr an ima$e; 

first encryptug cede 1 c r encrypting the data ising a first key; 

second encrypting code for twice encrypting the first hey using a $e 
cond key and a third key, the second key being a public kej i; i a first p 
i irate key/public hey pair, a private key cf the first private kcjr/publi 
c ley pair being primarily in the sole possession cf the intended image 
cntput device, and the third Icy being a pablic key nf a second private 
key/pablic key pair, a piivate key cf the second private key/public key 
pair being primarily in the s c 1 c pessessicn of He intended recipient of 
the image; and 

transmitting cede lor transmitting the encrypted data and the twice- 
encrypted first key tc the intended printer. 

(97) A printer driver according to Claim 96, wherein the first key is ra 
rjdcmly generated. 

(98) A printer driver according tc Claim 96, wherein the first encrypt in 
g cede utilizes a s y mc c i. r i c encryption algorithm. 

(99) A printer driver according tc Claim 96. wherein tie Second eocrypti 
ng cede utilizes an asymmetric encryption algorithm. 
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(IDG) A printer driver ac-ccrding tc Claim 98, wherein the second encrypt 
ing code encrypts the first key osiog the second key before encrypting t 
be first key i s i n % the third key. 

[101) A printer drivel according tc C 1 a j tn 96, wLereic the second encrypt 
ing cede encrypts the first key using tte third key before cocryptiog th 
e first key using the second key. 

(102) A printer driver according to Claim 96, wherein tit tw i c e-e o c ry pt « 
d first key is contained in a header which also contains infciraalicn rcl 
ated tc the identity ef a person initiating the secure transmission. 
(lOij) A printer driver according tc Claim 102, wherein the header also c 
cotains a signed header hash sod a signed data hash, and farther compris 
iog vc r i f i c» t i o a cede for verification cf the authenticity and integrity 

cf the signed header hash and cf the signed data hash. 

(104) A printer driver according tc Claim 103, further comprising scad in 
I code f c r sending a notice tc a sender cf the header, if one of the S i g 
ned header hash and sigoed data hash fails the verification of aitheotic 
i t y and integrity. 

(105) A printer driver which securely transmits data to in intended prin 
ter. wherein the data can be used tc Rene rate an image at the intended p 
rioter is tie presence of an intended recipient, the printer driver ccmp 
rising: 

data generating cede for generating data fcr an image; 

first encrypting cede fcr e n c t y p t i rt £ the data using a f i t s t key; 

second encrypt i n g cede for twice encrypting the first key using a se 



(57) 



#M 2001-186358 



cofld key aid a third kef-, ihe second key being a public key of a first p 
ri?ate kef/pit He key pair, a private key cf the first private key/pebii 
c key pair being primarily in the sole possession cf the intended image 
output device, and the third k e ^ being a public key cf a second private 
key/pibiic key pair, a private key of the secund private key/public key- 
pair being primarily in the s c 1 e possession u 1 the intended recipient cf 
the image ; 

generating code for generating a header containing the twice encrypt 
ed first key; 

first transmitting code f c r t r a n sm i 1 1 i 0 g the header tc the intended 

image cntpnt device; 

receiving code for receiving a request from the intended image cutpu 

t device f d i the encrypted data; and 

second transmitting cede fcr transmitting the encrypted data tc the 
intended image output device. 

(106) A printer driver acccrdiig tc Claim [05, wherein the first traosmi 
tting code transmits the header tn the intended image output device by e 
-mil. 

(107) A printer driver according tc Claim 105, wherein the header which 
is generated in the generating cede also contains a reference tfi a lecat 
ico of the encrypted data, and wherein the reqiesi for encrypted data co 
DtaiDS the reference tc the location of the encrypted data. 

(108) Ccmputer-eiecntabl e process steps stored on a computer-readable me 
flMum, the computer-executable process steps for generating an ima?e from 

twice-encrypted data transmitted an intended Image cntpnt device, wo 
erein the twice-encrypted data can be used tc generate the image at the 
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b t e n de d image output li e m c e ; 

second decrypt log code tc decrypt the enciypted data using the decry 
pted first key; and 
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intended recipient. 

(116) C omp u t e r- eie c a t a b 1 t process steps according u Claim 109, Therein 
the receiving code fir l her receives a signed header hasb and a signed da 
U hash, the nethod further c cm p r is i n g: verifying cede to verify the auth 
enticity and the integrity cf the signed header bash and cf the signed d 
a t a Lash. 

(117) Computer-executable prccess steps according tc Claim 116, further 
comprising cede tc discard the encrypted data rattier than catpattitg an 
image based upon the encrypted data, if the signed leader hash or the si 
goed data hash fail the verification cf authenticity and integrity. 

(118) Ccmpu t er-eiecitable prccess steps according tc Claim 117, firther 
comprising code tc send a nctice tc a sender of the signed header, if th 
c signed header hash cr the signed data hash fail the verification cl an 
Uealicity and integrity. 

(119) Compc t e r -exe c u t ab I c prccess steps according to Claim 109, wherein 
the intended image output device is a priiter. 

(120) Computer-executable prccess steps according tc Claim 109, wherein 
the intended image mtpot device is a facsimile machine. 

(121) Ccmput e r -exe c u t a b 1 1 prccess steps stored on a c cmp u t e t - r e a d a h 1 1 lie 
dittm, the c ompn t ei -execu t abl e process steps icr geoeiating a it image frcn 

data transmitted tc an intended image output device, wherein the data c 
an be used to generate the image at ihc intended image output device ia 
the presence cf an intended recipient, the computer-executable process s 
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tops ccmpr i s j ng : 

i c c c i t i o g cede to receive a Wader containing a twice-encrypted 1 l r s 

t key; 

Sending code to seed a request for encrypted data corresponding to t 
he header ; 

leccifing cede to receive encrypted data cGrrespGoding to the header 



first decrypting code t c t » i c e decrypt the twice encrypted first key 
using a second key and a thirl key, tie second key be lag a private key 
of a first private ke y/p nblic key pair, tie private key cf the first pri 
rate key/pablic key pair being primarily in the sole possessioa cf the i 
at ended recipient cf the image, and the third key be in* a private key of 
a second private key/public key pair, the private key cf the second pri 
v a t e key/public key pair being primarily in the sole possess ici n f the i 
ntended image cntput device; 

secoad decrypting code tc decrypt the encrypted data osing the decry 

pted first ley; aad 

image generating cede to generate an image from the decrypted data. 

(122) Ccmputer-exec&tabl c process steps acccrdiajr. tc Claim 121, wherein 
the header is received by e-mail. 

(123) Computer-executable process steps according tc Claim 121, wherein 

I he header also cental as a reference tc a local inn cf the encrypted data 

, aad wherein the request for encrypted data contains the reference to i 

be location of the encrypted data. 

3. Detailed cxplanatioa of the invention 

Field Of The [nvciuioQ 
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The present invention is related t c an image output method and a p p a r 
atns L h c r e c f and computer-readable m< d i «m which perform secure printing 
wherein an image can he generated only by an io tended Image output devic 
c in the presence cf an intended recipient. In particular, the i a v e a t i c 
d concerns cecrjpt inn of piitit data in such a manner that the data can c 
nl? be decrypted ising information supplied both by tiic iot ended image o 
ulput device and bj the intended recipient. 
Description Of The Related Art 

Id a oetverked olfice enrirenment, a pi U t job generated by a c crop u t 
e; at cue location in the network can be printed b J an image output d e v i 
cc at anotker locatico. H the print job includes confidential or other 
wise Sensitive information, concerns arise abcut unauthorized inteicepti 
cq of tie print job at one ct several points in tbc netvorl. In partici 
lir, the piiit job can be intercepted by a device on the network such a < 
a compcteT system running simple network snooping tools. 

In adiiticn T concerns a I s c arise abcut unauthorized viewing cf the p 
riited output. The printed document may be viewed bf any person who bap 
pens to be near the image output device before the intended recipient *r 
r i ?e s tc collect tie dec uiit n t . 

Similar issnef arise with a facsimile transmission. The transmissic 
n can be i i t e r c e p r e d , and any person who arrives at a destination facsim 
ile machine before the intended recipient can view the facsimile decames 
t . 

SUMMARY OF THR INVENTION 

Accordingly, wlat is needed is an arrangeraeot whereby a printed Q3 f 
ared document can cnly be generated at a si intended image output device i 
n the presence of an intended recipient. 

The intent i c □ addresses the fcreflcing need by encrypting print data 
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using 3 symmetric encryption a I g c r i t km with i randcrolv generated symmetr 
ic key, and the a encrypting the symmetric key so that II can only be rec 
overed by an intended image output device in the presence c f an intended 

recipient. The encryption of the key is performed by ao a s frame trie enc 
ryption (i.e., pa b 1 i c/p r i va t e key-pair) algorithm. The key is encrypted 

twice, nsing public keys for both the ioteoderf recipient i q d for the in 
teoded image c a t p d t device. Then, the encrypted print data and the encr 
ypted randomly generated key are sent tc the image output device. 

In order tc geierate in iniaje icr the document, ike twice-encrypted 
symmetric ley is decrypted using the private keys for both the image cot 
p b t device and the intended recipient. Preferably, the private key fcr 
the intended recipient must be personally supplied by the recipient. Up 
on decrypti cn cf the symmetric key. the print data is decrypted using th 
e decrypted symmetric key, and an image is output by the image output de 
vice in accordance with the decrypted print data. 

As t result cf the foregoing a r r i a g crac a t , the symmetric key can only 

be recovered using the private keys lor beta the intended recipient and 

fcr the intended image output device. This, as leng as the private key 
S remain in the sole possession cf the intended recipient and the intend 
ed image cut pot device, respectively, the symmetric key can only be recc 
vexed at the intended image output deUcc in the presence cf the intende 
d recipient. Becanse the symmetric key is needed to decrypt the print d 
at a. an image can be printed from the print data only at the intended in 
age output device in the presence of the intended recipient. 

Accordingly, cne aspect is f the present invention c c o c e r n s seenre tia 
nsmissioc cf data tc an intended image CBtprjt device Stch as a printer & 
: a facsimile machine. The data can be used tc sencratc an image only a 
t the intended image output device in the presence cf an intended recipi 
em. The data is encrypted ufing a firs: key. The fiisi key is then tw 
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ice encrypted asiog a sex cud key and then 2 third key. The second key i 
s the piblic key Qi a first p t t f a t e key/public t e y pair, the private key 

of the first private key/public key pair being primarily io the sole pc 
ssessicn of the intended image output device. The third key is the publ 
ic key of a second private key/public key pair, the private key cf the s 
eccnd private key/public key pair being primarily in the sole possession 

cf the intended recipient. The encrypted data and the t * i c e - e n c r y p t e d 
first key both are then transmitted to the intended image output device. 

Preferably, the first key is randomly generated. la additico, the e 
ncryption cl the data with the first key is preferably performed using a 

Symmetric encryption algorithm, ana the encryption of tke first key wit 
h the second and tkird key? are preferably performed nsiag an asymmetric 

encryption algorithm. 

Moreover, the c r d € r cf encryption cf the first key using the second 
and tkird keys can be reversed. For instance, encryption «f the first k 
cy nsiog the second key can occur before a second encryption cf the firs 
t key using the third key- Alternatively , encryption cf the first key u 
sing the third key can occur before a second encryption cf the firsi Uy 

us ing the second key. 

Preferably, the t*itre-encrypted first key is contained vithin a head 
er along with ether information relating to the identities of the sender 

and the recipient. Also, in the preferred embodiment, the method furih 
cr includes the steps cf processing the header and the encrypted data by 

application cf a c t y 1 1 c g r a p h i c basking algorithm, resulting in a header 

hash and a data hash, and c f digital!? signing the header hash and the 
data hash with a fGirtb key. The f earth kev is the private key cf a thi 
rd private key/public key pair, the private key c 1 the third private key 
/public key pair beinf prima riiy in the sole possession cf the person in 
itiatiog the transmission cf data- The t r a n em ; i 1 i n g step preferably tra 
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o s mi n the signed header- hash and toe signed data hash a 1 c n g with the e o 
erupted data and the t w i c e - e n c r y p I e d first key. 

By virtue of the foregoing a 1 1 a n g erae n t s , (lata fcr generating an imag 
e can be transmitted to an image oitput device , thereby the image is col 
y capable of being printed by the intended image output d e p i c e in the pr 
esence c f an intended recipient* 

In another aspect, the invention cancels generation cf an image fro 
m data transmitted tc an intended image output device, s i c h af a priater 

or a facsimile machine, or such a device itself. The data cat be ised 
to generate the image only at the intended image output device in the pr 
esence of ao intended recipient. Encrypted data aod a tv i c e -e o c r y p t e d f 
irst Ley are received by the device. The encrypted first key is twice d 
ecrypted using a second ley and a third key. respect irel; - The second k 
ey is a private key cf a first private key/public key pair, the private 
key of the first private ley/public key pair being primarily in the sole 

possession of tie intended recipient. The third key is a private key o 
1 a second private iey/piblic key pair, the private key cf the second pr 
ivate key/public key pair being primarily in the sole pessession of th.e 
intended image o 1 1 p s t device. After the encrypted first key is t vr i c c d e 
crypted. the encrypted data is decrypted using the decrypted first icy, 
and an image is generated b? the intended image output device frura the d 
ecrypted data. 

Preferably, the decrypt Icq of the first key using the second and t fa i 
rd keys is p e r f u r me d. ti s i u g an asymmetric decryption algorithm. Decrypti 
on c J the encrypted data * s i n g the decrypted first key is preferably p e : 
formed using a symmetric decryplisn algorithm- 
Depending upon tbe order cf cicrypiioa cf the first key, deer y pi i en 
cf the first key using the second key can occur before decryption of the 
firs* key using the third key. A I i e r a a : i v e i y . deerypticn cf the first 
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key u s i a f X h e third key € a n occur before d e c r y p i i c d c f the first key n s i 

Bg the second key. 

In the preferred embodiment, the second key is contained in a smart- 
card which is in the possession dJ the intended recipient. Thus, the se 
cend key is primarily accessible only with permission by the intended re 
cipicnt. Likewise, the tbird key is p r e 1 e r a b 1 jf contained to a smart-chi 
p which is maintained internally in the intended image output device, ti 
erehy being shielded frcn access by devices other than the intended itng 
e citpit device. 

Preferably, the device a 1 s c receives a header containing iafcriuat ion 
j c I a t c d t c the identities of the sender and the recipient. Also, in t h 
e preferred embodiment, the receiving step further inchdes receipt of a 
signed header h a 5 h and a signed data hash. The authenticity of the s i g 
ned header hash and of the signed data hash preferably are verified usia 
g a fourth key which is the public key cf a third public key/pri*ate key 
pair; the private key cf the third public key/private key pair being pr 
I ma r i 1 y maintained in the sole possession cf the person who initiated th 
c transmission cf the data for receipt by the device. If the signed hea 
d c r hash or the signed data hash fail verification c f authent ici ty, the 
encrypted data is preferably discarded. Otherwise, the integrity cf the 
signed header 6a Sb. and the signed data baJb are verified by application 
of a crypt cgi a phi c hashing algorithm L c the header and the encrypted da 
t a . If the signed header h a s b c : the signed data hash fail the t e r i f i c a 
ti c n c f integrity, the encrypted data is preferably discarded. 

By virtue cf the loregcing arrangements, data seat to an image cutpu 
t device is used to generate an image only if the data is intended for t 
hat image outpnl device, acd only if an intenscd recipient is present to 
supply a needed private key. 

Another aspect of the invention concerns secure t r a n s ra i s s 1 c a cf data 
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to afl intended image o 1 1 p d t device, wherein the data tan be used t c gen 
crate an image only at the intended image c 1 1 p a i device in the presence 
cf an intended recipient. [ n this aspect, tie data is encrypted twice u 
sing 2 first key and a second key, tie 1 i r s t key being the public key cf 
a first private key/public key pair, the private key of the first priva 
tc key/public key pair being primarily in the scle possession cf the int 
ended image output device, and the second key being the pihiic key cf a 
second private key/public key pair, the private key cf the second pnvat 
e key/piblic ley pair being primarily ia the Sole possession cf the itte 
nded recipient cf the image. The t w i <: e~c DC r y p wd data is then transmiit 
ed to the intended inage oatpnt device. 

By virtue cf the foregoing a r r a n genu n t s . data for generating an imag 
e can be traosmitted tc an inage cttpnt device, whereby the image is cnl 
y capable cf being printed by the intended inage output device in the pi 
csence cf an intended recipient. 

In another aspect, tie invention is directed tc generation cf an iina 
ge from twice-encrypted data transmitted tc an intended inage oitpat d e v 
ice, wherein the tvicc-eicrypted data can be used tc generate the image 
enly at the intended image cntput device in the presence t> I an intended 
recipient. In this aspect, t v l c < -« n c r y p t e d data is received and then tv 
ict decrypted by using a first key and a second k e 7 - The first key is th 
e private key cf a first private key/public key pair, the private key cf 
the first private key/peblic key pair being primarily in the sale posse 
ssion of the intended recipient of the image. The secend key is a priva 
ic key of a second private key/public key pair, the private key of the g 
ccend private key/pablic key pair being primarily in the scle possess icq 
cf the intended image cntput device. An image is then generated frcm t 
he decrypted data. 

B v virtue c f the f c r e g c i n g arrangements, data sent to an image c u t p a 
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gene-rale as image only if the data is intended for t 
ice, and only if an intended recipient is present to 
v a t c k e y . 

s p c c t of the inrentico. a method is provided fur sec 
data to an intended image o a t p n t device, wherein the 
generate an image at the intended image o a t p a t d e y i 
[ an intended recipient. The method comprises a fir 
f encrypting the data using a first key, and a seccn 
twice encrypting the first key ising a second key a 
second key being a public key cf a first private key 
private key of the first private kej/public key pair 
the sole possession cf the intended image output dev 
ey being a public key cf a second private key/puhlic 
key cf the second private key/public key pair being 
le possession cf the intended recipient cf the image 
A generating step then generates a header containing the t ¥p i c c -c a c ; y p 
ted first key aid in a lirsi transmitting step, the header is transmitte 
d to the intended image output device. In a receiving step a request -is 

received from the intended image output device for the encrypted data, 
and then in a second transmitting step the encrypted data is transmitted 
to the intended image cut put device. 

By vijtue cf the foiegciag arrangements, a header fcr a piiui job ca 
n be sent to an intended i m a £ e output device, bnt the corresponding encr 
ypted data dees not have to be sent to the intended image output device 
until reqnired by the intended image Gutput device. In 3 d d i : i c a . the in 
tended image output device is used to generate an image only if the da la 
is intended fcr that image on: put device, and only if a* intended recip 
ient is present to sipply a needed private key. 

In ancther aspect of the indention, a met bod is provided for general 
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i n g an image frcm data u a n s m i t t e d to an intended image Gutput device, w 
herein the data can be osed to generate the image at the intended Uage 
oitpat d e t i c e in the presence of an intended recipient. The cttbod corap 
rises a receiving step cf receiving a header containing a t^iceeccryptt 
d first key and a sending step of sending a revest for encrypted data c 
cirespondiag to the header. The method also comprises a receiviag step 
ol receiving encrypted data corresponding tc the header, and a first dec 
rypting step of twice decryption the twict-encrjpted first Icy using a 5 
ecoad key and a third key, tfce second key beiny a private key cf a first 
private key/public key paiT, the private key of the first piiyate key/p 
ublic key pair being primarily in the s u I e possess iun cf the intended re 
cipient cf the image, and the third key being a private key cf a second 
private key /public key pair, the private key cf the second private key/p 
ublic key pair being primarily in the sole possession cf the intended i m 
age output device. A second decrypting step is provided (or decrypting 
the encrypted data using the decrypted first key, and m image genera tin 
g step generates an image frcm the decrypted data. 

By virtue cf the fcTegfling arrangements, a header for a print job ,ca 
n he sent to an intended image cotpnt device, but the corresponding end 
ypted data dees net have tn be sent to the intended image cot put device 
ajtil required by the intended image cut put device. In addition, the in 
tended image cutpn? device is used tc generate an image only if the data 
is intended for that image output device, and cu!y if an Intended recrp 
itnt is p - e s c o t tc snppiy a reeded private key. 

The invention may be implemented in methed cr apparatus, cr computer 
-c. x ecu f . able process ?tep? : such a? a printer driver, an iioage output dev 
ice for transmitting the data f c r secure p i i n t i n g . as well as special-pa 
rpese appaiatus such as a printer cr a facsimile machine for receiving a 
o d printing the data. 
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This brief samffiarv h-as been provided so that the nature cf the ioven 
tico may be understood quickly. A mere complete understanding c I the in 
v e n t i c u cio be obtaiied by reference to the f c 1 I o w i n g detailed descriptl 
cn cf tie preferred embodiments thereof in connection with the attached 
d ra wi ngs . 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The present inveiitiiin is generally directed to the secaie printiag c 
f image data such that the image data tan only be printed c a an intended 

ontput image device in the presence of an intended recipient. The prcs 
«nt invention therefore provides a manner by which a deenmect can be sec 
urelf transmitted from a computer to a remote image cutput device ld a o 
etverkei environment. The dcciment is maintained in a secure fashion un 
til the intended recipient is present at the intended image cuipnt devlc 
e ? whereupon the intended "mage cutput device prints the image. 

Figire I provides an overall system view cf a networked cortputing en 
vircnraeit in which tne present invention may be implemented. As showo i 
n Figore 1, the networked computing environment comprises a network wbic 
n is ccBnected tu desktop computer 10, laptop computer 20, server 40, .d i 
gital copier 30 and printer 50. Network 1(10 is preferably a u Ethernet c 
etwerk medium consisting of a bis-type physical architecture, although t 
he invention can be it Mi ted over other types of networks f including tie 

i d t e r t\ e t . 

Desktop computer 10 Is preferably an IBM PC-compatible computer havi 
ng a windowing enviicniicot such as Micrescit Windows 95, Windows 95 cr \V 
indew! .NT. As is typical with IBM PC-c omp a t L b 1 e computers, desktop temp 
uter 10 preferably has a display, keyboard, mouse, floppy drive and/cr c 
ther type cf storage medium (nut shewn), Also attached in desktop cumpu 
tei 10 is smart-card interface device 15 for interfacing with a smart-ca 
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rd cf a computer user, stch as smart -card 16. Smart-card 16 therefore p 
rcvides a nechanism whereby a computer user caa authenticate the user' s 
identity tc desktop computer 10. In addition, smart-card 16 c c n t a i a S a 
priiate key cf a private/public key pair which is specific to a computer 

user and which is used in the present invention Icr the secure printing 

of image data as discussed more fully below, 

Laptop computer 20 is also au IBM PC-compatible computer having a wi 
ndcwiog environment such is Microsoft Windows 95, Windows 9 8 or Windows 
NT- Like desktop ccmpitei 10, laptop cciupoteT 20 also has a display, le 
v b c a i d , ncose and floppy drive or ether storage means (not s h c * n ) . In a 
dditica, laptop ccmpitei 20 also has a s m a r t - c a i d interface device 25 it 
tiched to it for interfacing tc the smart-card of a computer user such a 
s smart-card 26. Also attached tc network 100 is digital copier 30, whi 
ch is capable cf receiving image data over nttwcTk 100 Icr priding. Di 
g 1 1 a I copier 30 also has attached smart-card interface device 35 for iot 
erfaeing with the smart-card cf a print job recipient, such as smart -car 
d 36. In addition, server 40 is alsc connected tc network 100. Server 
40 preferably comprises an \M PC -c cmp a t i b 1 e computer having an cperatu 
g system such as DOS, Microsoft Windows 95. Windows 95 cr Windows NT, UN 
IX or ether operating system. Server 40 has a storage device 41 which i 
« preferably a large fixed disk for storing numerous files. Server 40 c 
an therefore be utilized by ether devices on network 100 as a file serve 
r and may alsc act as a gateway f g t ether devices on network 100 to a act 
her network such as the Internet. 

Printer 50 is also connected t c a e t *0 r I 100 and is preferably a I a s e 
r cr bobble-jet primer which is capable cf operating as both a printer 
and a facsimile device. Printer 50 has a storage device 51 w h i c h is pre 
feiably a large fixed disk, and also has an embedded smart-chip 57 which 

contains a private key of a p r i v a : c/p u b 1 i c kev pair c c r i e s pc n d i tg ic p: 
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inter 50 f o t use in encr-ypt ten and/or decry plica of data received by pri 
ntcr 50. In addition, printer 50 is connected tc Smart -card interface A 
evice 55 which is capable cf interfacing with a sua r t ~c a r d of a print jc 
b recipient . such as s m a r t - c a i d 56. In this raaonei, the print i b |? of i p 
riot job for a particular intended recipient may be controlled through t 
he os? of smart-card interface device 55 and smart-card 56, in combinati 
cn with $mart~chip 57 in printer 50. 

Figure 2 is a block diagram shewing an overview cf the internal a r c t 
itectire cf desktop compiler 10. Ed Figcre 2, desktop computer 10 is se 
cn to Loci a d e central precessing unit (CPU) 210 such as a p r o g r amma b 1 e n 
icrcprccesscr which is interfaced tc computer bus 2O0. Also coupled to 
computer bos SOD are leybr.ard interface 220 for interfacing tc a keybcar 
d T mouse interface 230 for interfacing u a pointing device, floppy disk 
interface 240 for interfacing tc a floppy disk, display interface 250 f 
or interfacing to a display, network interface 260 fci interfacing to ne 
twerk 100, and smart-card interface 2 6 5 for interfacing tc smart-caid in 
terface device 15. 

Random access memory ('RAM*) 270 interfaces to ccmpnter bus 2 0 0 t <k p 
rovide central processing nnit ("CPU"] 210 with access tc memory storage 
, thereby acting as the main run-time memory for CPU 210. In particular 
, when executing stored program instruction sequences, CPU 210 leads the 
se instrect icq sequences from fixed disk 2 8 0 C c r ether memory media) int 
c random access memory CRAB' J 270 and ciccutes these stored program ins 
trocticn sequences cut cf RAM 270. U should also be ncted that stands! 
d-disk swapping techniques available under windowing operating systems a 
llow segments cf memcry to be swapped to and from RAM 270 and filed disk 
2S0. Read-only memcry C ROM" ) 2 9 0 uteres invariant instruction sequenc 
e S , such as start-op instruction sequences for CPU 210 or basic input/on 
tput operation system ('BIOS'*) sequences i c r the c pernio! cf peripheral 
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devices attached t c c c iriu u t e r 10. 

Fixed disk 280 it cne example cf a CGflJpuler-readable medium that stc 
res program instruct i c n Kpeutcs executable by central preceding unit 
(' CPU' 7 ) 210 sg as tc constitute <j per at log system 281. printer driver 2 B 2 
, smart-card interface driver 283, ether drivers 2 S 4 , word processing pr 
o g r a m 285, other programs 286, e-mail program 2 & 7 and ether files 2 8 8. 
As meat [coed above, operating system 281 is preferably a hindering cpera 
ting system, although other types cf operating systems mav be nsed with 
the present invention. Printer driver 282 is utilized tc prepare image 
data fcr printing cb at least one image output device, seek as printer 5 
0. Smart-card interface driver 283 is utilized tc drive aid control sea 
it-card interface 265 for iaterfacing with smart-card interface device 1 
5 so as tc read and write tc a smart-card suck is smart-card 16. Other 
drivers 284 include drivers for each cf the remaining interfaces *hich a 
re coupled to computer bus 200. 

Word prccessing program 285 is a typical *ord prcceEScr program fcr 
creatine documents and images, sach as Microsoft Word, cr Ccrel WcrdPcif 
ect. Other programs 286 contains other programs necessary tc cperate.de 
sktcp compute: 10 and tc ran desired applications. Email program 25] i 
s a typical e-mail program that allows desktop computer 10 to receive an 
d send e-mails ever network 100. Other iiies 288 include any cf the fil 
es necessary fcr the operation cf d e S i i o p computer 10 cr files created a 
od/cr maintained by ether application, programs en desktop computer 10. 

Figure 3 is a block diagram shoeing an overview cf the internal arch 
itecture of printer 5 0. Id Figure 3 . primer 50 is seen tc contain a pr 
inter s ma r t - c h i p 57 which, as previously mentioned, costa ir>t a private k 
e y c c r r e s p c n d i o g t c printer 50 for e n c i y p i i a n/d e c r y p t i fl n purposes. P r i n 
ter 50 also contains a central processing unit ("CPU") 310 suck as a pre 
g r a mma b e microprocessor which is interfaced t c printer bus 3 0 0. Also c 
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0 u p 1 e d tfl printer hs 3 D-0 are control logic 3 2 0. vhich is utilized tc cc 
Dtrol the printer engine ci printer 50 Coot shown]. l/O ports 330 which 
is used tc comma! cat e will various i a p i t/c u t pu t devices of printer 50 ( 
out shcivn), smart-card interface 365 which is utilized to interlace wilk 
sma r t - c a t d interface device 55. and network interface 360 *fcic-h is ttil 
ized tc interface printer SO tc netwcik 100. 

Also coupled to pi i a tc i bus 300 are EEPROM 340, fcr containing ooq-t 
oiatile program i n s t r uc t i c n s , random access memory (* R AM 9 ) 3 7 0 , printer 
memory 51 md read-only memory ROM ) 3 9 0. RAM 370 interfaces tc print 
er bus 3 0 0 tc provide CPU 310 with access tc memory storage, therein act 
iof as Ike nain ruB-time memory fcr CPU 310. In particular, *hen eiccut 
log stored program instruction sequences, CPU 310 loads those iistructie 
n sequences from printer memory 51 !cr other raemcry media) into 1? AM 370 
and executes these stcrcd program instruct icn sequences cat cf KAM 3 7 0 . 
ROM 390 stores invariant instruction sequences, such as start-up instru 
etica sequences fcr CPU 310 or BIOS sequences fox the operation of varis 
a$ peripheral devices cf pricier 50 'act shewn). 

Printer memory 51 is cat example cf a ccmpntci-reidablc medium that 
stores program instruction sequences executable by CPU 3)0 sc as tc cccs 
titute printer engiic logic 351. ccntrcl 1 c jf i c driver 3 5 2 , I/O pert driv 
ers 353, smart-card interface driver 354. eicr ypi i ci/decrypi i «n Ic&ic 35 
5, queue 3 5 6 , ether files 3 5 7. printer smaTt-chi[> driver 3 5 8 , and e-mail 
prcgram 353, Printer engine logic 351 and control logic driver 35? are 
utilised t c c c n t r o I and drive the printer engine c I printer 50 (not she 
wo) sc as tc print an image according tc iuage data received by priatei 
50, preferably over network 10A- t/0 pert drivers 353 are utilized to d 
rive the input and output devices (net Shewn) connected thrcugh I/O pen 
c 3 3 0. Smart-card interface driver 3 5 4 is 1 1 i li i e d tc drive smart-card 
interface 365 for inteTfaci^g tu smart-card interlace device 55. thereby 
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enabling printer 50 t c -read and write t c a s m a r t - c a r d s o c b as smirt~cir 
d 56. 

Enciyptio n/d ccryptioc logic 355 enables printer 50 U icceiu e n c r y p 
ted data according tc the present invention and to carry out the accessa 
ry steps tc enable the decryption cf the encrypted pilot data in the pre 
sence cf an intended recipient. The details cf these Steps ire discuss* 
d more fully below. Queue 356 is utilized tc contain a print queue coup 
rhed ci nuiccruas print jobs which are tc be printed. Other files 357 c 

0 n t a t d other files and/or programs for the operaticn cf printer 50. Pri 
oter smart-chip driver 358 is utilized ta drive and interface with print 
er smart-chip 57 fur encryptic n/d e c r y p t ion purposes . Lastly, c-raail pre 
gram 359 is a typical e-mail program fcr enabling printer 50 tc receive 
e-mail messages from network 100. Such email messages may contain p r I o 
t jcb-related inferouticn. as discussed in mere detail be 1 « w . 

Figure 4 is a block diagram showing an overview cf the internal arch 
itectnre of server 40. In Figure 4. server 40 is seen to include a cent 
ral processing unit ("CPU* 5 410 such as a p r o g r amraa t 1 e micrgpiccesscr wh 

1 c h is interfaced to computer bus 4(10. Also coupled tc computer bus (00 
is a network interface 460 for interfacing tc oetwcrl 100. in addition 

, random access memory ( 3 RAM 3 ) 4 7 0 ? fixed disk 41, and read-only ( r SOM" ) 
490 are alsc coupled to compute: bus 40 0. RAM 47D interfaces tc ccmput 
er ens 400 to provide CPU 410 * i t h access to memory storage, thereby act 
ing as the main run-lime memory for CPU 410. In particular, wheu eiecut 
ing stored program instruction sequences, CPU 410 loads those instruct io 
n sequences from fixed disk 41 'or ether memory media) into JAM 470 and 
executes those stored pre gram instruction sequences cut of R.Uj 470. It 
should alsc be recognized thai standard disk-swapping techniques allow s 
cgments of memory to be swapped tc and frcro ii AM 4 7 0 and fixed dish 4L. 
ROM 4 S 0 stores invariant ics true lion sequences, such as start -Bp ins true 
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t l o n Sequences fci CPU 4i0 ci basic input /cut pet operating system ('RIOS 
3 ) seqneoces for the operation cf peripheral devices which may be attach 
e d tc server 40 (net s h o w n) , 

Filed disk 41 is cue e s a m p 1 e n f a computer -readable nediom that stcr 
cs program iastructicn sequences executable by CPU 410 so as tc constitu 
tt operating system 111, network interface driver 412, encrypt icn/decryp 
tioo logic 413, e-mail program 414, queue 415. and ether files 416. As 
mentioned above, operating system 411 can be an operating system such as 
DOS, Windows 55, Windcvs 98, Windows NT, UNIX, cr other such operating 
sjstem. Network interface driver -112 is utilized tc drive network inter 
face 4 6 0 for interlacing server 40 tc netweri 100. Encrypt Lcrj/dec r^pt i o 
n logic 413 allows server 40 to receive encrypted data and tc either ma i 
ntain snch data in qneue 415 ct tc send such data tc an image ootput d c v 
ice sich as printer 50 for printing. E -ma i 1 program 414 is a typical fi- 
nal I program aod enables server 4D tc receive aad/cr send e-mail message 
s ever oetweri 100. Queue 115 is atilizcd U store numercis print jobs 
|qt output oq one cr mere image output devices, such as printer 5 0. Las 
tly. other files 416 contains cthei files cr programs necessary to open 
tc seiver 40 and/or tc provide additional Functionality tc server 40. 

Figure 5A is a view for explaining the encryption process of the pre 
scat inveotioa whicn enables a computer use' cf a computer on netw&rk 10 
0, such as desktop computer 10, to send data related to a print jcb fur 
printing only on an intended image output device when an intended recipi 
ent is present. F g r instance, a computer user located at desktop c crap u t 
er 10 may wish to prepare a document nsing word processing program 285 f 
or print i c g only on printer 50 at a later time wiien an intended recipieo 
t is physically present at printer 50. Mo s : i rape : la n i I y . the computer u 
ser at desktop computer 1 G wishes U protect the print job data from bei 
n g accessed o r viewed by any device other t h s n printer 5 0 c r by any per; 
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en other than i h e intendtd recipient Tlierefcre, the present in 1 ? eat ion 
encrypts the image data sc that it cannot be accessed by an ether ccmpu 
ter user or device co network 100 and sc that it will remain encrypted in 
p until the time the intended rtcipicat is physically present at the int 
ended printer, [o this manner, even if tie encrypted data is accessed a 
l any point prior t c t b e printing en the intended printer 50 ; the data * 
ill only appear tc be a pile of miatelligible bits. 

Specifically, a 5 seen in F i g u i e 5 :\ , Ue encryption process starts * i 
th image data 56i which is preferably created by a computer o?cr at desk 
tep computer 10 using a program such as wcrd processing ptcprani 285. Wh 
en the computer user is ready tc send a priat job c o i r e s p c d d i ng tc data 
501 tc an intended printer, such as printer 50, for receipt by an intend 
c d r t c i p I c n t , the o S e r preferably presses a button p r c r i d e d in w c r d p r c c 
essing program 2 85 tc indicate that the decumeot is tc be printed in a S 
ecirt fashion. In the preferred mode, printer driver 282 handles the eo 
crjrpticn process fcr encrypting data 5 01 before, it is sent over n e t w o r I 
100 to printer 50. Prelerably, printer driver 282 generates a raodcmly- 
gene rated symmetric te? fcr isc with a symmetric encryption algorithm- 
Data 501 is then encrypted by applying the symmetric encryption aigcrith 
m using the i a n d cm 1 y -g e ne r a t c d symmetric key 5H. thereby creating symme 
trically encrypted data 502. In this Banner, symmetrically encrypted da 
ta 5 02 can only be decrypted by a device having a si rn i ! a r symmetric end 
ypticD algorithm and a copy of symmetric key 510. Therefcie. symmetric 
key 510 and symmetrically encrypted data 5H2 must be passed tc printer 5 
0 in order fcr the data t c eventually be decrypted and printed cut fur t 
he intended recipient. In crde; tc ma i n l a i n security until sacfe time as 

data 5 01 is printed cn printer 50, symmetric key 510 is a Isc encrypted 
with two piblic keys which correspond tc the intended printer and the U 
tended recipient. Each public key is from a public key/private key pair 
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which is used in an a ? yTnme trie c c c i y p t i u n algorithm. In this manner, o 
ttly the combination of private keys ol the intended recipient and tk in 
tended printer will allow symmetric icy 510 tc be decrypted such thai sy 
nicetrically encrypted data 502 can be decrypted for printing. 

Therefore, as seen in Figure iA, priutei public key 520 correspond^ 
% to prime: 50 is obtained f r era 2 public key i d f r a S t t o c 1 1 r e which is pr 
ovided ca 3 server en network 100, hem a third-party key service via ne 
Uork 100, oi i t cm another suitable scarce such as a local key storage f 
ile. Printer public key 520 is then utilized in ccajtiTicticn with an asy 
nmetric encryption algorithm tc encrypt symmetric key 510, tfeereby crcat 
ing p f intcr-key-eocrypted symmetric key 5th In thh manner, symmetric 
k e > MO cannot be accessed without the corresponding private key of tbe 
public/private key pah c c r r c s p c a d i n g to printer SC. As discussed aheve 
the private key for printer 50 is pielerably maintained in snart-chip 
5? whick is embedded within primer 50 sc as tc prevent exposure oi the 
private key to any othei person or device. Id this manner, printer key 
encrypted symmetric key 511 can only be decrypted by the intended image 
output device, in this ease printer 50. 

Although the above encryption of symmetric key 510 ensures that only 
the intended printer can print the print job, it does net ensure that o 
nly ibe intended recipieot will receive the print job foi viewing. The r 
cfcre, it is also pr Her able to further encrypt symmetric key 510 with a 
public key ca r r es pc nd i ng tc the intended recipient. As shown in Figure 
5A, recipient public key 530 is also obtained from a public key iafrast 
mctuic. cr ether suitable scarce. The p r i a t e r-k e j- e t c ry p t e d syamciric 
key 511 is then encrypted again using recipient public key 530 i is cenjuo 
ctico wiih ao a s yrame trie encryption algorithm to create t w i c e - e n c r y p u d 
symmetric key 512. Twi cc-tnerypted symmetric key 512 is shown to be enc 
rypted fit a lir£; layer with printer public key 520 and at a second laje 
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r with recipient piblic k-ey 53 0. the 
key 510 unless the specific ccmbinat 
recipient and intended printer is pr 
As farther shewn in Figure 5 A , a 
vice-encrypted symmetric key 512 aid 

to the print j c E> soch as the seeder 
s identity, and other information sti 

printer-related setting* Such as Se 
p I i c£ cpticn, and a pa p c r - s e 1 e c t i on 
ntial infcimaticD related to the prj 

intended printer for purposes of pr 
f the print jcb for t v e a t u a 1 p i i a t i n 
r 540 may centals other types of inf 

a format which docs set contain t w i 
the preferred e oab o i i mc n t , header inf 
ncrypted symmetric key 512 t c create 
a t c i r an integrity algorithm is a r> p [ 
encrypted data 502 io crder to prcvi 
ceifing device may verify that beade 
ta 502 have not been altered in any 
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0 which is used to ensure the mtegr 
Its in a value known as a "hash* wb i 
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Oder private key 560 is -preferably obtained I i cm a smart -card, soch as s 
ma r t - c a i d 16 T belonging tc the sender at desktop computer 10 via smart-c 
aid interface device 15. In the case where the sender and the i d t e o d e d 
recipient are the same person, sender private icy 560 is frosi the same p 
rivate key/public key pair a? the recipient pallic key 530, In s c c h a s 
ltuatioD, the Sender can send a seenre piiat jcb tc an intended printer 
free a remote location and can then later retrieve the print icb with th 
e sender's smart-card at the printer. 

In this manner, print jcb 550 can be transmitted tc the intended ima 
ge output device, in this case printer 50, Icr being queued and eventual 
ly printed in the presence of the intended recipient. Intended printer 
50 can then perform a a t he u t i c a t i c n cf the sender of print job 5 5 0, veiif 
icaticn dI the integrity cf header 551 and enciyptcd data 502 cf print j 
cb 55 0, decryption of twice-encrypted symmetric ley 512, and. finally : d 
ecrypticn of encrypted data 502 for printing on pricLei 50. 

The encryption a r r a nc eme n t provided in Figure 5A is a preferred embc 
diment cf the present invention; hwen r, it can be appreciated that the 

data cGr responding to a secure print jcb can be encrypted nsiog ether, c 
ombi nations cf pablic keys, and can alsu be encrypted directly using the 

aforementioned public keys with an asymmetric eocryptioa algorithm. Fo 
r instance, the cider cf encryption cf symmetric key 510 can be reversed 

such that symmetric key 510 is first encrypted using recipient public k 
ey 530 and is then encrypted using printer public key 520. T h e t 1 1 c r e . t 
wicc-encrypted symmetric key 51 2 won id first be decrypted using the priv 
ate key of lite lot ended printer and wcnSd then be decrypted u s : n g" the pr 
irate key cf the intended recipient. 

In Figure 5 B , the data associated with the secure p : i a : icb i 5 twice 
-encrypted using the public keys cf the intended prime; and intended re 
cinient it c c b j nnc i i c n with an asymmetric encryption algorithm, instead 
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cf vith a symmetric fcev-as s h c * n io Figure 5 A . In Fiffnrc 5 B , data 5 S 1 i 
5 the print data associated vith the secure print jot. As in Figure 5 A , 

public keys n f the intended printer (520) and intended recipient (530) 
are first obtained from a public key infrastincture or other suitable so 
arce. Thereafter, data 581 is encrypted nsiag an asymmetric encr fption 
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e-encrypted data to the inieaded printer. It should be octed that the e 
ncryptico arrangement c 1 Figure 5A is the preferred embodiment because d 
cable-encryption of a potentially large atneant cf data corresponding to 
data 5 S 1 as depicted in Figure SB may require substantially greater ccmp 
otiiff rescarces than t n e encryption arrangement cf Figure 54 therein on! 
y s ymme trie key 510 is double-encrypted. 

Figure 5 C is a view for expiaioing the decryption a a d printing of da 
ta 501 which was encrypted according to Figure 54. First, print job 55 0 
is r e c e i t e d at the 1 n t e n d e d p r i n t e i . in this case printer 50. v r i a o e : * c 
rk 100. afld contains the same components as depicted in Figure 5A. Nest 
. sender public key 561 is preferably oh: a iced from a public key infra si 



(82) 



2001-186358 



r b c t n x e , g r other s u i t a b J c source, and cct responds t c the ccccputer user 
at d c s k t G p ccrnputei 10 who Sent the print jcb in printer 50. In the tit 
ernati/e, seeder public key 561 can be provided in a c c p y o I L he sender' 
S digital certificate c c o t a i ne d within header inforraatiun 540. Sender p 
ublic key 551 is then used ti c c n j n a c t i on with hashing algorithm 570 to 
authenticate and verify the integrity of header 551 and symmetrically en 
crypted data 502. Specifically, signed header hast 554 and signed data 
hash 553 ire authenticated using sender pablic key 561 to verily that th 
e sendei was indeed the cieatcr of print jcb 550. II the aithcnlicatioc 
fails, the print job is preferably discarded. 

Next, print job 550 is stored in qneue 356 cf printer 50 or, in the 
alternative, is stored in queue 415 cf server 40 far sibseq&ent access L 
y printer 50. Occe the intended recipient is physically present at prin 
ter 50, recipient private key 531 is obtained through the recipient's sm 
art-card, such as smart-card 55, which is inserted into smart-card inter 
face device 55. For secority reasons, recipient private key 531 is main 
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csence is verified at ih-- local L g n cf the ioteadcd printer, the print jc 
b is maintained in an encrypted f c rm and cannot reasonably be decrypted 
by any other person cr deyice that may have intercepted the encrypted da 
ta . 

Figure 5 D is a view for explaining the decryption and printing fit t w 
iceeocr vpted print data 583 which fas encrypted pursuant to the altcraa 
tive of Figire 5 B . First, t w i c e ~ e d c i y p t c d data 583 is passed to smait-c 
ard 56 of the intended recipient y i a smart-card interface 55. vbereupep 
twice-encrypted data 583 is partial!) decrypted by using recipient priva 
te key 531 vhicb is located in smart-card 56. Smart-card 55 thereupon r 
etnrcs the now partially-decrypted data 5 8 2 hack tc the ccnticl cf print 
ci 50. Next, partially-decrypted data 582 is passed ts smart-chip 57 dI 
printer 50 where paH tally-encrypted data 5 52 is completely decrypted n 
sing printer private key 521 contained in smart-chip 57 in printer 5 0. 
The decrypted, "clear* data 581 is nc* returned from smart-chip 57 tc pr 
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ison to the t e 5 c u r c e s reqnired to process a twice-encrypted symmetric ke 
y as depicted in Figares 5 A and 5 C . 0 l b e r collateral features depicted 
id Figure 53, such as anthenticaticn a q d i n t e g r i : y verification, may a 1 s 
0 be incorporated in tbe decryption process cf Figure 51). 

Tbe hashing p recess depicted in Figure 5 A provides signed data hash 
553 which is a type cf checksum that allocs tbe receiving device, such a 
s printer 50. to verify the integrity of the s ymme i i i c a 1 1 y encrypted J a i 
a 502, Figure 6 shews a view fcr explaining one method cf geoeratiaR an 
d formatting a s i % n e s hash f c t the data, in Figure 6 . p r i 1 1 data 801. v 
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hich cc n e s po d ds to the -image in be securely printed, is in an uuencrjpt 
ed. ™ plaintext" format. A bashing algorithm, which is preferably a one- 
way bash function, is then applied to print data 601 to create data hash 

610 which is essentially a message digest. Data hash 610 is then digit 
ally signed using the private bey ci the sender, such as sender private 
key 560 ci Figure 5A. Signed hash 611 Bay then be optionally encrypted. 

It either case, signed hash 611 is copied tc signed hash 612 which is 
part ol data blcck 6 0 D fcr transmission tc the intended printer where it 

is used for authentication and integrity verification pirpeses. 

Figure 7 A is a Tie* for explaining the structure of the header acccr 
ding tc a preferred embodiment of the indention. Specifically, recipien 
t ID 701, sender ID 7D2 and symmetric key 703 are initially provided in 
a cleai T plaintext format for inclusion in leader 700 as depicted in Fig 
uie Ik. A hashing algorithm is then collectively performed co recipient 

ID 701, sender ID 702 and symmetric key 7 0 3 tc c r e e l e hash 7 2 0 . Hash 7 
20 is thei sigied with the private tey of the sender , such as sender pri 
vatc key 560 as depicted in Figure 5 A , t a create sifted hash 721. Signc 
d hash 721 may then be optionally encrypted. In either case, signed h.is 
b 721 is then copied tc signed hash 722 for inclusion in header 700. 

Eecipient ID 701 is left in a clear, plaintext format, copied to rec 
i p i c a L ID 711 and i & c i u d e d in header 700. 1 1 the alternative, recipient 

ID 701 may be encrypted with the public Ley cf the intended printer for 

arjcnymit? cl the intended recipient's identification, copied rc recipie 
q \ ID Ml aid included in header 700. In cither case, the intended p r i Q 
ter can ei tract and read recipient ID 711 upon receipt cf the h e a d e ' : th 
e i c b j" allowing the intended printer to queue the print j c b corresponding 

ic the intended recipient Sender ID 102 may be encrypted *ith the pub 
lie key of the intended printer befcre inciusiun in header 700, bo*, such 

encryption is act necessary. E i the' way, sender ID ?02 is copied tc se 
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adcr [D 712 and included in header 700. Symmetric kef 703 is preferably 
twice-encrypted as shewn in Figs re 5 A and then proiided in twice-encryp 
ted, s y mme t r i c key 713 and included in header 7 0 0 . 

Ab alternatiYe structure fur the header is shewn in Figure 7B whereb 
y tie header is structured so that it can be transmitted t c the intended 
printer separately from the e a c j y p t e d data. Specifically, recipient ID 
751, sender ID 7 5 2 , syuraetiic key 7 5 3 and a nnilcrm resoarce locator (U 
XL) 754 are initially provided in a clear, plaintexl fcrmat fcr inclusic 
i in header 750 as depicted in Figure H. URL 754 is preferably an addr 
ess lecatien where the encrypted data is stored fcr later retriefal and 
transmission tc the intended printer, Fcr instance, iwlc«-erurypted d a t 
a 512. as depicted in Figure 53, wculd be maintained nn fixed disk 280 o 
f desktop computer 10, cr cn fixed disk 41 of server 40, at a memory Ice 
iticn corresponding tc URL 754. Ml 754 is then included in header 750 
which is sent tc the intended printer without the encrypted data that c 
orrespends to leader 7 5 0. Desktop computer 10, cr server iO. as the c a s 
e may be, subsequently sends the c i) r r c s p o o d i ng encrypted data tc the int 
ended printer open receipt cf a request from the intended printer wl)ich 
contains a reference to URL 754. In this manner, tie intended printer d 
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Hecipieot ID 551 is -left in a clear, plaintext format, copied tc ice 
i p i e n t ID 7 51 1 n i3 i a c I s d e d in header 7 5 0. In the alternative, recipient 

ID 751 may be encrypted with the pcblic key oi the intended printer lor 

anonymity of the intended recipient's identification, copied t u rccipie 
ot ID 761 and icclnded in header 750. in eitker case, the intended piia 
ter can extract and read recipient ID 761 upon receipt of the header, th 
ereby allowing tbt intended printer to qaeue the print jcb cci respcniliflf 

to the intended recipient- Sender ID 7 5 2 mar be encrypted with the f u b 
lie key cf the intended printer before inclusion in header 750, but sich 

encryption is net necessary. Either way, seode' ID 752 is copied to se 
nder ID 762 and inclnded io leader 750. Symmetric key 753 is preferably 

twice-encrypted pursuant U the method shown in Fifore 5A and is thc» p 
rcYided as twice-encrypted, symmetric key 763 and included in header 750 

In this alternative Leader format, URL 754 is also encrypted, cither 
with the public key of the intended printer cr with symmetric key 75 3, a 
nd then stcred in URL 764 io header 750. 

By this arrangement, header 750 can then be transmitted separately t 
o the intended printer pricr to the transmission cf the encrypted data, c 
cnespCBding to header 750. I a this embodiment of the inTentinn, header 

75 0 is preferably traflsniitted via an E-mail message tc the intended pri 
liter, saca as printer 5 0 , through E-mail program 287 cf desktop comparer 

10 for receipt by E-ma i i program 359 cf printer SO. Other means cf Sen 
d i d % header 750 c ? e r network 100 to printer 50 can also be used, such as 

taroagh the use of one or mere network protocols. When the encrypted d 
ata is needed by printer 50, s o c h as when the intended recipient is pres 
ent at printer 50, printer 5 3 can decrypt URL 7 5 4 arid send a data :cq.uss 
t cDDtaining a reference tc URL 754. The encrypted data corresponding 1 
a UBL 75 4 is then sent tc tbe intended printer for decrypt ico and print i 
eg, Symmetric key 76:! is then pre!erab:y decrypted in the manner de = cri 
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bed in Figure 5 C , after ^ h : c h t fi e encrypted data is decry pled and printe 
ft ia the presence cf the intended recipient. In this manner, the memory 
capacity of the intended printer nr of a file serve: utilized by the in 
tended printer is net burdened with large files cf encrypted print data 
until it is accessary to retrieve such print data fcr decryption and pri 
nt tag . 

Figure 8 is a flowchart fcr explaining the overall encryption and tr 
ansmissicn of a secure print jcb according tc a preferred embodiment of 
the present indention. The p r c c e s s steps shown in this figure, as well 
as those of Figure 9. are ccmpiiter-eTecotabl e process steps stored on a 
c cmpo t e r- i ca dab 1 e niemcry mediae s-ncn as disk 2 8 0 , disk 41, or printer me 
mcry 51. First. Id step SSOl. a sender working gd a computer in & netwc 
rked computing environment straits a print jcb for sending si document or 

image fcr secure printing at an intended image output device, Such as a 

printer or facsimile device, in the presence of an intended recipient. 

Preferably, the print job is sabnitted by pressing a button in a word p 
xoccssing application, such as Microsoft rVord, whereupon a printer drive 
r interface appears fcr collecting necessary information, such as t h e ,i n 
tended recipient, and the like. In the alternative, a Separate client a 
pplication may be provided tc collect snch information. Preferably, the 

printer driver also performs the remaining steps of Figure 8 fcr encryp 
t i o n a q d t r a n s n i 1 1 a 1 cf a secure print job. 

Next, the image data associated with the print jcb is encrypted with 

a randomly-generated symmetric It e y in conjunct Lea with a symmetric encr 
ypticn algorithm as disenssed above with regard to Figure 5 A (step 5 S 0 2 > 
la Step 5 S 0 3 . the public key fcf the intended recipicos. and for the i 
n t c n d z d printer, respectively, are obtained f r cm a p n b 1 i c key infrastruc 
tare, q j other suitable source, and the sender's private key is obtained 
. preferably from a smart-cara 16 belonging tc tile sender via smart-card 
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interface dence 15. W step S804. the sfntnetric key is twice enc r yp l« 
d, ay first encrypt log the symmetric key with the public key of the iott 
nded printd in conjuocticii with an asymmetric encrypt i cr algorithm, and 

then encrypting the symmetric key again with t hi c public key of the iite 
nded recipient la conjunction with an a s y ram e t r i c encryption algorithm. 
Alter the symmetric ley is t v i c e - e n c r y p t e d , a header is formed which 

includes the t w i c e -e n c r j p t e d symmetric key and which also includes info 
imatioE related U the print job such as the identity cf the intended re 
cipient and of tie sender in an aneiurypted format (step S S 0 5 ) . As disc 
cssed above, the leader may also include a URL which points tc the locat 
icn cf the encrypted datt which corresponds to the header in the case wh 
ere the header is to be sent separately from the encrypted data. [ti sie 
p 5806, a hashing algorithm is then applied tc the header tc form a head 
er hash and tc the encrypted data tc fcrni a data hash. The header hash 
a b d data hash arc then digitally signed with the private hey of the send 
er in Hep SOT. The header hash and data hash may also he optionally e 
acrjpted for additional security. Preferably, the private key cf the se 
tdei is obtained from a smart-card which is kept in the possession cf th 
e sender. Id the alternatiYe, a tcken, flashrom cr other means of stoia 
g e can be used to securely store the p r irate key of the sender. 

.Next, i; is determined in step SSDS whether the header is to be sent 

tc the intended printer separate from the corresponding encrypted data. 
If the header is to be sent s t p a • a t e I J . centre I passes t c step S S 0 9 i 
a which the print jch. c cmp rising the header and the header hash, is sen 
t c t e r the network to the intended printer without the c c i r e £ p c- a d i n g e a c 
rypted data. Preferably, the intended printer has an E-maii program and 

the print jcb containing the header and header hash is sent tc the prio 
ter by means of E-mail, although the prim jcb may he separately sent tc 

the intended p r i a t e i by ether means, s i> c h as ? i a c c e c r mere ether net* 
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printer by normal means. over the network. 

Nest, the public ley cf the sender is obtained f r c m a public key iaf 
rastructur c, from another Suitable source, cr from a copy cf the sender' 
s digital certificate provided in the header ior use in the subsequent a 
ntheutication and verification cf integrity cl the secure print job (see 
p S 9 0 2 ) - ia step S 9 0 3 the sender' s public kej is used to check the auth 
eaticity cf the digital signage * f tn e header hash cf the secire print 

job. If the header hash is net authentic, ccntrcl passes to step S 9 0 4 
in which a notice is preferably sent to the sender to » i r n the sender th 
at a ncrj-au t he c t ica t ed print job has been detected. Next, in step S?f)5 
the print jcb is discarded. Flew then passes tc the end in step S! 1 9 . 
[f. however, L It c header lash is determined to be antbeoLic is step S903, 

flow passes tc step S906 in which the integrity cf tic header is verifi 
ed against the header hash. 

In step S 9 0 6 a hashing algorithm is ised tc compare the header to th 
e signed data lasb tc verify that the header was received intact and vaS 

net tampered with, therefore indicating that the header is cf reliable 
integrity. If the integrity cf the header is in question, control p a s « e 
s to step 5905 io which the print jcb is discarded, Ccntrcl tie a passes 

to the end io step S919. If, hcwever T the header is cf reliable iotegr 
ity, centre! passes to Step 59 0 7 in which header information, such as th 
e identity cl the intended recipient, is extracted frsm the header where 
upon the print job is placed is a print q. u e a e for subsequent p i i t r i n g . 
Preferably, l h c print job is sent frcm the printcj to a lecal serve' on 
the netwcifc where it is stored in a print qceue according tc the identif 
i c a : i o s c f the intended recipient unci! subsequently r e i r i e i a I h y the in 
tended printer. In the alternative, the print queue may be maintained i 
n a large memory device ffithin the intended printer itself. 

In step S 9 0 % , the intended recipient arrives at the i e c a : i c n 5 i the 
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intended primer and ins-erts a s m a r l - c a r d belonging in the intended reci 
pienl Into a s m a r t - c a i d interlace device which is connected tc the inten 
ded printer. Preferably, the smart-card contains a unique private ley 3 
el d also contains aithenlicatiog identification information cci responding 

to the intended recipient. The printer, t 1 a ttie smart-card interface d 
cvicc, obtains the authenticating identification information of the inte 
Q d e d recipient from the smart-card and determined whether the ideatifica 
ticn of the intended recipient is authentic (step S 9 0 9 ) - If the identif 
ication infoimat ion is net authentic, control passes to the end in step 
5919. If the identification information is authentic, the prist queue. 

which is located in either tbc prioler itself or in a local server, is 
queried, preferably by reference to the identification ef the intended r 
ceipicnt, tc determine if tbc re arc any print jobs corresponding to the 
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ntained in the header wLi c h was received earlier by the intended priater 
, ffherein the URL points tc the location cf the encrypted data sod cone 
spending data h a 5 b . In this manner, the i o 1 e a d e d printer is oot I e i / e 
d t c Store large files c f e a c r y p t c d data until they are needed for p i i a t 
ing, at which tine the encrypted data is palled from its location on a s 
erver or computer to tie intended printer. The retrieval request by the 
printer and s i b ? e q i e n t transmission of the encrypted data and data hash 
preferably are implemented by normal network c orarau o i c a t t o n means, such 
as TCP/fP pictccol and HTTP protocol where the retrieval request contain 
S a reference tc a URL , althongh other protocols such as FTP may also be 
used. Control then passes tc step 5913. If it is determined in step 5 
911 that the header was act sent separately to the intended printer, the 
n the print jcb already comprises the encrypted data along with the bead 
er, and therefore centre! passes directly to step S913. 

Next, in step 5 9 1 3 ; the twice-encrypted symmetrical key is extracted 
frcm the header cf the print job and is partially decrypted hy using th 
€ private ley cf the intended recipient in cccjBncticn with an asyrametri 
c decryption alpcrinm. In the preferred eicbc d i m e n t , the smart-card of 
the intended recipient contains the intended recipient's private key and 
also contains a cicrcpiccessor such that the t w i c e- e n c r y p t e j symmetrica 
1 key is passed tc the Smart-card by the printer through a smart-card in 
ierface device. In this manner, the partialdecryptiun actually takes p 
lace cu the smart-card itself, thereby preventing external access to the 
private key of the intended recipient which is contained cn the smart c 
a : d . 

The partially decrypted symmetric key is then returned ficm the Em a: 
t - c a r d to the printer whereupon the partially decrypted symmetric key is 
completely decrypted by asing the private key of the intended printer i 
o conjunct ion with an a s ymme t r I c decryption alycritha ; s ; c p S 9 L 4 ) . P;ci 
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erably, the private key f the id tended primer is contained it a smart- 
chip which is embedded within the printer. The partially decrypted symin 
ttric key is passed to the smart-chip where it is completely decrypted u 
nrg the private key contained in the smart-chip, tliereby preventing ex t 
ernal access tc tiic printer's private key which is contained ca the smar 
t-chip. Other means Ur storing the private key cf the intended printer 
ccold also be used, such as a token, ftashrcm, ci the like. 

The completely decrypted, "clear* symmetric key is then returned frc 
m the smart-chip to the intended printer, whereupen the decrypted. *clea 
r" symmetric key is ased tc decrypt the encrypted data pmsiant tc a syra 
metric decryption algorithm (step S915). Next, the integrity cf tbe dec 
rjpted data is veiified ia step S 9 1 6 by comparing the data with the data 
hash through the use of a hashing algorithm as discissed above, if tie 
integrity cl the decrypted data cannot be verified, then the data nay h 
are been intercepted and/cr tanpered with such that it cannot be relied 
upon, aad therefore tcntrcl is passed tc step 5917 in which the entire p 
r i a t job is discarded- C o n t r c 1 is then passed t c the end in step S 9 1 9 . 

[f, however, the integrity cf the decrypted data is verified in Step £9 
16, control passes to Step S 9 1 8 i u which an image is printed by the infce 
nded printer in accordance with the decrypted data (step $512). Centra 1 
then passes t c the end in step S 91 9 . 

In this manner, see ire printing ss provided such that an image can b 
e generated coly by an intended inagt cat pit de?Ice in ibe presence cf a 
n intended r c c i p 1 en 1 . Id particular, the p t i n t data Is encrypted in sue 
h a manner that the data can only be decrypted using a c c a;b i ca t i o n cf se 
cret keys which are supplied by the intended image output device and by 
the intended recipient, respectively. 

the invention has been described with particular illustrative embodi 
meats. It is tc be a n d e ; s t c c i that tie invention is net limited id the 
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abcve-d« scri bed embod itie-n t s and Uat various changes and mc d I f L c a t ices m 
ay be nude bf those of ordinary skill in the art witloit d e p a r 1 1 d g f i c m 
the spirit and sccpe c f the invention. 
4. Brief description of the drawings 

Figure I is a r e p r e s e a t a t i ? c view ol a networked computing c n v i r c nme 
at in which the present indention may be i up I ene n t e a . 

Figure 2 is a detailed b i c c 1 diagram shoving the internal architect* 
re of the computer shown in Figure t according lo the present invention. 

Figire 3 is a detailed bled diagram showing the interna! architectu 
re cf the printer shown in Figure 1 according to the present indention. 

Figure 4 is a detailed blud diagram showing the server shewn in Fig 
ure I according to the present invent ion. 

Figure 5 A is a view fcr providing a a explanation cf encryption of da 
ta and a symmetric key cf a secure print job according tc a first embed i 
ment of the present invention. 

Figure 5B is a vie* for providing an explanation cf enciypticn cf da 
ta cf a secure print job according tc a second embodiment of the present 
i nvent i cn . 

Figure 5C is a view [or providing an eiplaoaticn of the decnpUGO a 
nd printing cf a Secure print job acccrding tc an embed ime n t cf the pre? 
e n t invention. 

Figure 5 D is a vie* for providing an e x p 1 a n a r i c n g f the decryption a 
nd printing of a secure print job according tc another embodiment of the 

present invention. 

Figure 6 is a v i e w f c : providing a a e i p ) a n a t i c n c f the structure of 
an encrypted data format according to an embodiment cf the present inrcn 
t i o n . 

Figure ? A is a view lor providing an explanation cf the structure cf 
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an encrypted header Ur-mat according tc an embodiment of the present io 
i e n t i on . 

Figure 7B is a view for providing an explanation cf the structure of 

a a encrypted header format according tc another emb o d i me b t of the prese 
at invent ion. 

Figure S is a flowchart f c r providing an explanation cf encryption a 

id transmission <? J a secure print job according tc the present iiventioo 



Figure 9 is a flowchart for providing an explaoaticB cf decryption a 
id printing cf a secure print job according tc the present invention. 
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I . Abstract 

Secure transmission of data tc arc intended image output device, 
wherein the data can be used tc generate an image at tic intended image 
output d e \ i c e in the presence of an intended recipient. The data is cue 
Opted osing a first key. The first key is then encrypted ising a secon 
d key and a third key. The second key is a public key cf a first privat 
e key/public key p a 1 1 , a private ley of the first private key/public key 

pair being primarily in the sole possession of the intended image citpu 
t device. The tbird key is a public key cf a secend private key/public 
key pair, a private kef of the second private key/puM i c key pair bein* 
primarily io the sclc possession of the intended recipient ol the icage- 
The encrypted data and tse twicccncryptcd first key arc transmitted t 
c the intended image output device. The tv i c e -e nc r y p t c d first key is tl 
en decrypted ty using the private keys cf the second a q d first key pairs 
, respectively, which are primarily in the scle possession cf the intend 
ed recipient device and the intended image oitpnt device, respectively. 

The data is then decrypted and printed at an Linage cutput device. 



